Vulnerability in Linux

CVE-2026-63896

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling The WebUSB GET_URL handler in composite_setup() narrows landing_page_length to fit the host-supp…

EPSS: 0.002 (10.0th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 93c473948c588978cd55d9a3adad8b3e8057aa21, 6.3, 0

References