SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63901

UNKNOWN · CVSS N/A EPSS 0.23%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's USB serial driver for Digi Acceleport devices, where insufficient sanity checks on bulk-out buffer sizes can lead to out-of-bounds memory accesses or slab corruption. This flaw could be exploited by a malicious USB device to cause system instability or crashes. Organizations using affected Linux systems, particularly those with USB-connected devices, should prioritize patching to mitigate potential security risks.

CVE
CVE-2026-63901
Severity
UNKNOWN
CVSS
N/A
EPSS
0.23%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers than expected.