CVE-2026-63899

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the mxuport serial USB driver. A malicious device can trigger user-controlled slab corruption—a type of memory error affecting the slab allocator, which manages memory for kernel objects—by reporting a bulk-out endpoint max packet size smaller than eight bytes.

Recommendations Ensure that the bulk-out endpoint max packet size is at least eight bytes to prevent memory corruption.