news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-63899

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
7.0 High
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.23%
Risk score
9.2
Published
2026-07-19
Status
Published

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mxuport: fix memory corruption with small endpoint Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size. A flaw was found in the Linux kernel's USB serial mxuport driver. A malicious Universal Serial Bus (USB) device could exploit this vulnerability by reporting a bulk-out endpoint maximum packet size smaller than eight bytes. This can lead to user-controlled slab corruption, potentially allowing an attacker to achieve arbitrary code execution.

Weaknesses

CWE-120

Coverage 6

Advisories and references