CVE-2026-63901

USB: serial: digi_acceleport: fix memory corruption with small endpoints

published July 19, 2026

CVSS
—
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix memory corruption with small endpoints

Add the missing bulk-out buffer size sanity checks to avoid

out-of-bounds memory accesses or slab corruption should a malicious

device report smaller buffers than expected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.5th percentile
Published
2026-07-19T14:55Z
EPSS history
Timeline
  • 19 JUL 14:55Z
    USB: serial: digi_acceleport: fix memory corruption with small endpoints
    cvelistv5