Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63897

USB: serial: mct_u232: fix missing interrupt-in transfer sanity check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data (and leaking it to user space).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 82b48d70bced1ec8e5f676d1fd5eccc7a44dc418affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8b93ee5baeef6efabee2c3381907733ad2dbc883affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a093f3e0c03d25a86d747a655d4b9322ffb2ed87affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 70bb9a2661d34b93a9b83cf83e2b76289a712ef0affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 631b8b7c456567f7a8d26f6fc354c8dd9cc9f832affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f06bcaba29707f060706483b2020d3cafbe98f9faffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < ed260b56bc9fc878e5dcbb866eab8af0688e0e67affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 245aba83e3c288e176ed037a1f6b618b09e92ed8affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References