CVE-2026-63900

USB: serial: keyspan: fix missing indat transfer sanity check

published July 19, 2026

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: keyspan: fix missing indat transfer sanity check

Add the missing sanity check on the size of usa49wg indat transfers to

avoid parsing stale or uninitialised slab data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.5th percentile
Published
2026-07-19T14:55Z
EPSS history
Timeline
  • 19 JUL 14:55Z
    USB: serial: keyspan: fix missing indat transfer sanity check
    cvelistv5