SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63928

UNKNOWN · CVSS N/A EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A memory corruption vulnerability exists in the Linux kernel's USB serial driver for omninet devices, where inadequate buffer sizing can lead to user-controlled slab corruption if a malicious device reports a smaller endpoint max packet size than anticipated. This flaw could potentially allow an attacker to exploit the system, leading to unauthorized access or denial of service. Organizations using Linux systems with omninet USB devices should prioritize patching this vulnerability to mitigate potential risks.

CVE
CVE-2026-63928
Severity
UNKNOWN
CVSS
N/A
EPSS
0.22%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a smaller endpoint max packet size than expected.