news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-63957

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
7.0 High
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.22%
Risk score
8.4
Published
2026-07-19
Status
Published

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller size. A flaw was found in the Linux kernel. A malicious Universal Serial Bus (USB) device can exploit a vulnerability in the `safe_serial` driver by reporting a bulk-out buffer size smaller than eight bytes. This can lead to user-controlled slab corruption, a form of memory corruption, when the driver operates in 'safe' mode.

Weaknesses

CWE-131

Coverage 5

Advisories and references