https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 01:11:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-64333 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>USB: serial: digi_acceleport: fix write buffer corruption</p> <p>The digi_write_inb_command() is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the urb on timeout.</p> <p>To make things worse, for commands like break control where no timeout is used, the driver would corrupt the urb immediately due to a broken jiffies comparison (on 32-bit machines this takes five minutes of uptime to trigger due to INITIAL_JIFFIES).</p> <p>Fix this by adding the missing return on timeout and waiting indefinitely when no timeout has been specified as intended.</p> <p>This issue was (sort of) flagged by Sashiko when reviewing an unrelated change to the driver.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>USB: serial: digi_acceleport: fix write buffer corruption</p> <p>The digi_write_inb_command() is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the urb on timeout.</p> <p>To make things worse, for commands like break control where no timeout is used, the driver would corrupt the urb immediately due to a broken jiffies comparison (on 32-bit machines this takes five minutes of uptime to trigger due to INITIAL_JIFFIES).</p> <p>Fix this by adding the missing return on timeout and waiting indefinitely when no timeout has been specified as intended.</p> <p>This issue was (sort of) flagged by Sashiko when reviewing an unrelated change to the driver.</p> https://vulnerability.circl.lu/vuln/cve-2026-64333