Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23312

net: usb: kaweth: validate USB endpoints

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 3b5075e4ce97d1a1ce82ff3fb6308761987a48bbaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 6c986abd2a5033633c6e6f9dd135cf96b19c7fdfaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 7c7ebf5e45d2504d92ea294ac3828d58586491dfaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 72f90f481c6a059680b9b976695d4cfb04fba1f3affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f33e80d195a003b384620ee240f69092b519146baffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2795fc06e7652c0ba299d936c584d5e08b6b57a1affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0aae18e4638a7c1c579df92bc6edc36cedfaaa8caffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 4b063c002ca759d1b299988ee23f564c9609c875affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.17 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References