Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63900

USB: serial: keyspan: fix missing indat transfer sanity check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < bd6c5fe59f374b63173afe5cf0ab38a9a370f2c1affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < e124120e89b61a967e40dee6b5e1ecafc45c09d9affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < 41d9673941eebdde62ee73848fcfe4ae1105c979affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < 0bde5431037a076ff3750da2165fd77a6f5ff058affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < 3759a40738b83bb61699c85f063202b514b94f77affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < ea2b792330b44b6d7ce671c3e1d59d0c121f7ed1affected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < f7f566ad7519c7ca3bc9071350002940a2b0e22aaffected
  • 0ca1268e109acf6d71507398cb95cab2e670b654 to < ab8336a7e414f018430aa1af3a46944032f7ff96affected

Linux Linux

Default version status: affected

  • 2.6.23affected
  • 0 to < 2.6.23unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References