Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63957

USB: serial: safe_serial: fix memory corruption with small endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller size.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e3a1d6eee25dc96b1d2db0ecd9d8741e92056476affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c7336c0fba5c959249f3d793d33076b992ec3ee4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 9b3145b3001fb24de1da72d1deb0bea70e5a078baffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a550ed2117ca4709d38f713933ff924a83942e41affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f793b67d41e5fab719c5a90baa77cbd2fe259517affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 857b3cc73f91871ae4433f8b97c4670b78f8dc96affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 438061ed1ad85e6743e2dce826671772d81089ecaffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.10.259 to ≤ 5.10.*unaffected
  • 5.15.210 to ≤ 5.15.*unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References