Vulnerability in Linux

CVE-2026-64339

In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: bound bulk IN response length to the received transfer usbio_bulk_msg() copies bpkt_len = le16_to_cpu(bpkt->len) bytes out of the bulk IN buffer (usbio…

Affected products

  • Linux — versions 121a0f839dbb397af5fabb701cea3e9983223e50, 6.18, 0

References