NetSight
IP …
medium5.5

CVE-2026-63897

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanit…

Impact

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check Add the missing sanity check on the size of interrupt-in transfers to avoid parsing stale or uninitialised slab data (and leaking it to user space).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12.1 before 5.10.259
from 5.11 before 5.15.210
from 5.16 before 6.1.176
from 6.2 before 6.6.143
from 6.7 before 6.12.93
from 6.13 before 6.18.35

References