In the Linux kernel, the following vulnerability has been resolved:

USB: serial: omninet: fix memory corruption with small endpoint

Make sure that the bulk-out buffers are at least as large as the
hardcoded transfer size to avoid user-controlled slab corruption should
a malicious device report a smaller endpoint max packet size than
expected.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 180996f0ca774001944e4afa452d569ba2f6455c
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < b496e25ead5976bce2891dacaed09beb53a54f9f
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 4e7d32189d6219beb7db37cd0ea36b6bac7dfedb
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 9a3860454bdfb765f936965e975c594352602ffc
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0bda1893e4cc4ad2b7dcdbaca246f2af688c6c2a
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0fee0ccac29e088d4bfab7e2d075725dcecd803d
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < f34cf2928387fba01a78381f3258c7e1428897d9
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 60df93d30f9bdd27db17c4d80ed80ef718d7226b
Linux Linux affected
Version Status Constraints
2.6.12 affected —
0 unaffected < 2.6.12
5.10.259 unaffected ≤ 5.10.*
5.15.210 unaffected ≤ 5.15.*
6.1.176 unaffected ≤ 6.1.*
6.6.143 unaffected ≤ 6.6.*
6.12.93 unaffected ≤ 6.12.*
6.18.35 unaffected ≤ 6.18.*
7.0.12 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0bda1893e4cc4ad2b7dcdbaca246f2af688c6c2a cve-icon
https://git.kernel.org/stable/c/0fee0ccac29e088d4bfab7e2d075725dcecd803d cve-icon
https://git.kernel.org/stable/c/180996f0ca774001944e4afa452d569ba2f6455c cve-icon
https://git.kernel.org/stable/c/4e7d32189d6219beb7db37cd0ea36b6bac7dfedb cve-icon
https://git.kernel.org/stable/c/60df93d30f9bdd27db17c4d80ed80ef718d7226b cve-icon
https://git.kernel.org/stable/c/9a3860454bdfb765f936965e975c594352602ffc cve-icon
https://git.kernel.org/stable/c/b496e25ead5976bce2891dacaed09beb53a54f9f cve-icon
https://git.kernel.org/stable/c/f34cf2928387fba01a78381f3258c7e1428897d9 cve-icon
History

Sun, 19 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that the bulk-out buffers are at least as large as the hardcoded transfer size to avoid user-controlled slab corruption should a malicious device report a smaller endpoint max packet size than expected.
Title USB: serial: omninet: fix memory corruption with small endpoint
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-19T14:55:28.593Z

Reserved: 2026-07-19T07:54:57.021Z

Link: CVE-2026-63928

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.