CVE-2026-63898

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the mct u232 USB serial driver. The driver overrides the maximum transfer size for a specific device that accepts 16 byte packets for its 32 byte bulk-out endpoint. This can lead to slab corruption—a type of memory corruption affecting the kernel's slab allocator—if a malicious device reports a smaller endpoint max packet size than expected.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.