CVE-2026-63956EPSS p11.3%
CVE-2026-63956CVE-2026-63956
Description
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: cypress_m8: fix memory corruption with small endpoint
Make sure that the interrupt-out endpoint max packet size is at least
eight bytes to avoid user-controlled slab corruption or NULL-pointer
dereference should a malicious device report a smaller size.
Scoring
| EPSS | 0.22% probability of exploitation · percentile 11.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-07-30 |