CVE-2026-63928

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Memory corruption occurs in the USB serial omninet driver when a malicious device reports a smaller endpoint max packet size than expected. This can lead to user-controlled slab corruption, which is the corruption of memory chunks managed by the slab allocator, if bulk-out buffers are smaller than the hardcoded transfer size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.