CVE-2026-63899
- Source
- https://cve.org/CVERecord?id=CVE-2026-63899
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63899.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-63899
- Downstream
- Published
- 2026-07-19T14:55:08.116Z
- Modified
- 2026-07-21T03:47:39.788661172Z
- Summary
- USB: serial: mxuport: fix memory corruption with small endpoint
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: mxuport: fix memory corruption with small endpoint
Make sure that the bulk-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption should a malicious device report a smaller size.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63899.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/086b858b5f5125bc9d967ea2bd825f83d9f8f29d
- https://git.kernel.org/stable/c/2f3661eb2446e1ef593da45e01a3b21a906768ec
- https://git.kernel.org/stable/c/4085f0dbb1ce2251c9a5938d693de6593f0ab2bd
- https://git.kernel.org/stable/c/6c0cf56f00f280d72180bb6ce79741bc787a6269
- https://git.kernel.org/stable/c/b40166b4ef96067620a0f248e74ad9658c8f680c
- https://git.kernel.org/stable/c/be3a1ed4ae51fa8dde57383277d336ce834f2cd9
- https://git.kernel.org/stable/c/ccbec56f2f9af008f1574335cc6a668f16603e47
- https://git.kernel.org/stable/c/e906545641d34fb1a09a65b4b5cfdff40eb09681
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63899.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-63899
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedee467a1f2066d2bfa293f7c2c7f1ff7000b0a39eFixed086b858b5f5125bc9d967ea2bd825f83d9f8f29dFixed2f3661eb2446e1ef593da45e01a3b21a906768ecFixedccbec56f2f9af008f1574335cc6a668f16603e47Fixedbe3a1ed4ae51fa8dde57383277d336ce834f2cd9Fixede906545641d34fb1a09a65b4b5cfdff40eb09681Fixed6c0cf56f00f280d72180bb6ce79741bc787a6269Fixedb40166b4ef96067620a0f248e74ad9658c8f680cFixed4085f0dbb1ce2251c9a5938d693de6593f0ab2bd
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced3.14.0Fixed5.10.259
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.210
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.176
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.143
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.93
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.35
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.0.12