CVE-2026-63928

USB: serial: omninet: fix memory corruption with small endpoint

State: Published
Severity: Not scored
Published: Jul 19, 2026
Updated: Jul 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: omninet: fix memory corruption with small endpoint

Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a smaller endpoint max packet size than expected.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 180996f0ca774001944e4afa452d569ba2f6455cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b496e25ead5976bce2891dacaed09beb53a54f9fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4e7d32189d6219beb7db37cd0ea36b6bac7dfedbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9a3860454bdfb765f936965e975c594352602ffcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0bda1893e4cc4ad2b7dcdbaca246f2af688c6c2aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0fee0ccac29e088d4bfab7e2d075725dcecd803dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f34cf2928387fba01a78381f3258c7e1428897d9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60df93d30f9bdd27db17c4d80ed80ef718d7226bAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.143 through 6.6.Not affected 6.12.93 through 6.12.Not affected 6.18.35 through 6.18.Not affected 7.0.12 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 180996f0ca774001944e4afa452d569ba2f6455cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b496e25ead5976bce2891dacaed09beb53a54f9fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 4e7d32189d6219beb7db37cd0ea36b6bac7dfedbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9a3860454bdfb765f936965e975c594352602ffcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0bda1893e4cc4ad2b7dcdbaca246f2af688c6c2aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0fee0ccac29e088d4bfab7e2d075725dcecd803dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f34cf2928387fba01a78381f3258c7e1428897d9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 60df93d30f9bdd27db17c4d80ed80ef718d7226bAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.143 through 6.6.*Not affected
6.12.93 through 6.12.*Not affected
6.18.35 through 6.18.*Not affected
7.0.12 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.