CVE-2026-63904

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description USB Test and Measurement Class (USBTMC) devices may use an optional interrupt endpoint for notification messages. These messages usually include two-byte headers that define the payload format. The driver fails to verify if these headers are present before accessing the data buffers. If the actual length of the USB Request Block (URB) is insufficient to accommodate these headers, the driver may perform an out-of-bounds read or process stale data remaining from a previous notification.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.