CVE-2026-63957EPSS p11.3%
CVE-2026-63957CVE-2026-63957
Description
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: safe_serial: fix memory corruption with small endpoint
Make sure that the bulk-out buffer size is at least eight bytes to avoid
user-controlled slab corruption in "safe" mode should a malicious device
report a smaller size.
Scoring
| EPSS | 0.22% probability of exploitation · percentile 11.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-07-30 |