ROOT-OS-UBUNTU-2204-CVE-2026-63895 CVE-2026-63895 in linux - Patched by Root

Root has patched CVE-2026-63895 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

CVE-2026-63895

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: copy only received bytes on short ep0 read ffsep0read allocates its control-OUT data buffer with kmalloc not kzalloc at the Length value from the Setup packet, then copies that full len to userspace regardless o...