CVE-2026-72483

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The max3421 hub control() function, which handles USB hub class requests to the virtual root hub, contains a shift-out-of-bounds flaw. Within the ClearPortFeature and SetPortFeature switch statements, the function modifies max3421 hcd->port status by left shifting 1 by the value parameter without validating if the shift exceeds the width of port status. A malicious userspace task with access to the root hub can trigger this by issuing a USBDEVFS CONTROL ioctl with a wValue of 32 or greater. This leads to undefined behavior and arbitrary bit corruption of port status, potentially bypassing internal state checks and confusing the hub status.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.