← CVE Intelligence

CVE-2026-63900

USB: serial: keyspan: fix missing indat transfer sanity check PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 0ca1268e109acf6d71507398cb95cab2e670b654 before bd6c5fe59f374b63173afe5cf0ab38a9a370f2c1; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before e124120e89b61a967e40dee6b5e1ecafc45c09d9; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before 41d9673941eebdde62ee73848fcfe4ae1105c979; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before 0bde5431037a076ff3750da2165fd77a6f5ff058; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before 3759a40738b83bb61699c85f063202b514b94f77; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before ea2b792330b44b6d7ce671c3e1d59d0c121f7ed1; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before f7f566ad7519c7ca3bc9071350002940a2b0e22a; affected 0ca1268e109acf6d71507398cb95cab2e670b654 before ab8336a7e414f018430aa1af3a46944032f7ff96
Linux / Linuxaffected 2.6.23; unaffected 0 before 2.6.23; unaffected 5.10.259 through 5.10.*; unaffected 5.15.210 through 5.15.*; unaffected 6.1.176 through 6.1.*; unaffected 6.6.143 through 6.6.*; unaffected 6.12.93 through 6.12.*; unaffected 6.18.35 through 6.18.*; unaffected 7.0.12 through 7.0.*; unaffected 7.1 through *

CWE

No CWE identifiers supplied.

References