CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771 usb: storage: sierra_ms: reject short SWoC info transfers

In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierrams: reject short SWoC info transfers sierragetswocinfo requests sizeofstruct swocinfo 60 bytes from the device via usbcontrolmsg, but its callers only treat a negative return value as failure. A device that...

CVE-2026-98771

A vulnerability in the Linux kernel 's usb: storage: sierra_ms driver allows an unprivileged user to disclose up to 5 bytes of stale kernel heap memory . The issue stems from sierra_get_swoc_info() failing to validate that a full 60-byte swoc_info structure was received via usb_control_msg(). Whe...