CVE-2026-63897

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mct u232 USB serial driver where a missing sanity check on the size of interrupt-in transfers allows the system to parse stale or uninitialized slab data. This can lead to the leakage of sensitive information from the kernel slab (a memory management mechanism for allocating small objects) to user space.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.