CVE-2026-23365
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
net: usb: kalmia: validate USB endpoints
The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 185050b47df3d41e49f20ad01beea2e7b9cddaa7 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 28a380bfa5bc7f6a9380b85e8eab919ee6ac1701 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 12c0243de0aee0ab27cc00932fd5edae65c1e3a2 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 51c20ea5f1555a984c041b0dbf56f00d41b9e652 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 011684cd18349aa4c52167c8ac37a0524169f48c | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < 7bfda1a0be4caec3263753d567678451cef73a85 | affected |
| Linux | Linux | d40261236e8e278cb1936cb5e934262971692b10 < c58b6c29a4c9b8125e8ad3bca0637e00b71e2693 | affected |
| Linux | Linux | 3.0 | affected |
| Linux | Linux | 0 < 3.0 | unaffected |
| Linux | Linux | 5.10.253 <= 5.10.* | unaffected |
| Linux | Linux | 5.15.203 <= 5.15.* | unaffected |
| Linux | Linux | 6.1.167 <= 6.1.* | unaffected |
| Linux | Linux | 6.6.130 <= 6.6.* | unaffected |
| Linux | Linux | 6.12.77 <= 6.12.* | unaffected |
| Linux | Linux | 6.18.17 <= 6.18.* | unaffected |
| Linux | Linux | 6.19.7 <= 6.19.* | unaffected |
| Linux | Linux | 7.0 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459
- https://git.kernel.org/stable/c/185050b47df3d41e49f20ad01beea2e7b9cddaa7
- https://git.kernel.org/stable/c/28a380bfa5bc7f6a9380b85e8eab919ee6ac1701
- https://git.kernel.org/stable/c/12c0243de0aee0ab27cc00932fd5edae65c1e3a2
- https://git.kernel.org/stable/c/51c20ea5f1555a984c041b0dbf56f00d41b9e652
- https://git.kernel.org/stable/c/011684cd18349aa4c52167c8ac37a0524169f48c
- https://git.kernel.org/stable/c/7bfda1a0be4caec3263753d567678451cef73a85
- https://git.kernel.org/stable/c/c58b6c29a4c9b8125e8ad3bca0637e00b71e2693
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.