https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 20:49:19 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63904 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: usbtmc: check URB actual_length for interrupt-IN notifications</p> <p>USBTMC devices can use an optional interrupt endpoint for notification messages. These typically contain two-byte headers indicating the payload format, but the driver does not check if these headers are present before accessing the data buffers. In cases where the URB actual_length is not enough to fit these headers, the driver will either cause an out-of-bounds read, or consume stale leftover data from a previous notification.</p> <p>Fix by checking if actual_data contains enough bytes for the headers, otherwise resubmit URB to the interrupt endpoint.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: usbtmc: check URB actual_length for interrupt-IN notifications</p> <p>USBTMC devices can use an optional interrupt endpoint for notification messages. These typically contain two-byte headers indicating the payload format, but the driver does not check if these headers are present before accessing the data buffers. In cases where the URB actual_length is not enough to fit these headers, the driver will either cause an out-of-bounds read, or consume stale leftover data from a previous notification.</p> <p>Fix by checking if actual_data contains enough bytes for the headers, otherwise resubmit URB to the interrupt endpoint.</p> https://vulnerability.circl.lu/vuln/cve-2026-63904