In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix memory corruption with small endpoints

Add the missing bulk-out buffer size sanity checks to avoid
out-of-bounds memory accesses or slab corruption should a malicious
device report smaller buffers than expected.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < fd34198c2e5d164b57a7dcd4692626fece319225
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 25b93d0f229a115ab120106f37b9454170d4cfd4
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 6ab1e9ae099577a1019312088309ecbad2da9a91
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 8a65db5edd7b63365e9c5b7d9f4b8f314696dc49
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 41b645e791099f0038225da5e2ca3ca31f00d435
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 062dcc0b324afd03b1406f157190804f105718bb
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 9469419b12a100e7e2ccdda64ab45b8368456c8a
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5
Linux Linux affected
Version Status Constraints
2.6.12 affected —
0 unaffected < 2.6.12
5.10.259 unaffected ≤ 5.10.*
5.15.210 unaffected ≤ 5.15.*
6.1.176 unaffected ≤ 6.1.*
6.6.143 unaffected ≤ 6.6.*
6.12.93 unaffected ≤ 6.12.*
6.18.35 unaffected ≤ 6.18.*
7.0.12 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/062dcc0b324afd03b1406f157190804f105718bb cve-icon
https://git.kernel.org/stable/c/25b93d0f229a115ab120106f37b9454170d4cfd4 cve-icon
https://git.kernel.org/stable/c/41b645e791099f0038225da5e2ca3ca31f00d435 cve-icon
https://git.kernel.org/stable/c/6ab1e9ae099577a1019312088309ecbad2da9a91 cve-icon
https://git.kernel.org/stable/c/8a65db5edd7b63365e9c5b7d9f4b8f314696dc49 cve-icon
https://git.kernel.org/stable/c/9469419b12a100e7e2ccdda64ab45b8368456c8a cve-icon
https://git.kernel.org/stable/c/cb3560e8eab1dfa1cac1ed52631adf8ec6ff2cd5 cve-icon
https://git.kernel.org/stable/c/fd34198c2e5d164b57a7dcd4692626fece319225 cve-icon
History

Sun, 19 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix memory corruption with small endpoints Add the missing bulk-out buffer size sanity checks to avoid out-of-bounds memory accesses or slab corruption should a malicious device report smaller buffers than expected.
Title USB: serial: digi_acceleport: fix memory corruption with small endpoints
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-19T14:55:09.553Z

Reserved: 2026-07-19T07:54:57.019Z

Link: CVE-2026-63901

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.