SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63900

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's USB serial driver for Keyspan devices, specifically related to the handling of `usa49wg` indat transfers. The lack of a sanity check on the size of these transfers could lead to the parsing of stale or uninitialized memory, potentially allowing for arbitrary code execution or system instability. Organizations using Linux systems with Keyspan USB serial devices should prioritize addressing this issue to mitigate risks associated with memory corruption.

CVE
CVE-2026-63900
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: keyspan: fix missing indat transfer sanity check Add the missing sanity check on the size of usa49wg indat transfers to avoid parsing stale or uninitialised slab data.