CVE-2026-63956

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the cypress m8 USB serial driver. A malicious device reporting an interrupt-out endpoint max packet size of less than eight bytes can trigger user-controlled slab corruption or a NULL-pointer dereference. Slab corruption occurs when memory in the slab allocator, a kernel memory management mechanism, is overwritten with arbitrary data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.