news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-63901

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
7.0 High
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.23%
Risk score
9.2
Published
2026-07-19
Status
Published

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers than expected. A flaw was found in the Linux kernel's digi_acceleport USB serial driver. A malicious Universal Serial Bus (USB) device could report smaller bulk-out buffers than expected. This lack of proper size validation could lead to out-of-bounds memory accesses or slab corruption, potentially causing system instability or a denial of service.

Weaknesses

CWE-787

Coverage 5

Advisories and references