Vulnerability in Linux

CVE-2026-64334

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.

EPSS: 0.001 (0.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

  • Linux — versions 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, 6.6.145, 7.2
  • Linux Linux_kernel — versions 2.6.12, 7.2

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-64334?
CVE-2026-64334 is a medium-severity vulnerability in Linux, classified under Improper Locking. CVSS score: 5.5/10. Published 2026-07-25.
How severe is CVE-2026-64334?
Medium severity. CVSS v3 base score is 5.5 out of 10.