CVE-2026-64334
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop…
Does this matter?
Lower severity and a low EPSS score (0.10%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.10% probability · 1th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-667
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/2067b3838da6e4af03bae3630414193188d754b2Patch
- https://git.kernel.org/stable/c/2b7dc482f859f2d027db07ff0efc1c5df5b3451aPatch
- https://git.kernel.org/stable/c/5a82d842e8c35227d7227f19e5e654df1451782cPatch
- https://git.kernel.org/stable/c/5c1ea24b53bf3bfb859f0a05573997487975da23Patch
- https://git.kernel.org/stable/c/6a8592ace932081ea11aea41c460a1ca0f6344a4Patch
- https://git.kernel.org/stable/c/6e51147c2744d15730084dc89cc99180d3de4184Patch
- https://git.kernel.org/stable/c/79bc131df0e50f8f663c1fdbbe952aaf193a8d39Patch
- https://git.kernel.org/stable/c/bcfeae431db9986c2b313e6a760f2ac8df61e138Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.