CVSS 7.8 · High EPSS 0,18%
Kerentanan Out-of-bounds Write pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.
Deskripsi (NVD)
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mct_u232: fix memory corruption with small endpoint The driver overrides the maximum transfer size for a specific device which only accepts 16 byte packets for its 32 byte bulk-out endpoint. Make sure to never increase the maximum transfer size to prevent slab corruption should a malicious device report a smaller endpoint max packet size than expected.
Rincian
- Terbit di NVD
- 19 Juli 2026
- Terakhir diubah
- 30 Oktober 2026
- Status NVD
- Analyzed
- CVSS 3.1
- 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H· uraikan di kalkulator - Jenis kelemahan (CWE)
- CWE-787: Out-of-bounds Write
- EPSS (30 hari)
- 0,18% peluang dieksploitasi; lebih tinggi dari 7,1% CVE lain
Produk dan versi terdampak
| Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 2.6.12.1 hingga sebelum 5.10.259 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.210 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.176 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.6.143 |
| linux | linux kernel | Versi 6.7 hingga sebelum 6.12.94 |
| linux | linux kernel | Versi 6.13 hingga sebelum 6.18.35 |
| linux | linux kernel | Versi 6.19 hingga sebelum 7.0.12 |
| linux | linux kernel | Versi 2.6.12 |
| linux | linux kernel | Versi 2.6.12 rc2 |
| linux | linux kernel | Versi 2.6.12 rc3 |
| linux | linux kernel | Versi 2.6.12 rc4 |
| linux | linux kernel | Versi 2.6.12 rc5 |
| linux | linux kernel | Versi 7.1 rc1 |
| linux | linux kernel | Versi 7.1 rc2 |
| linux | linux kernel | Versi 7.1 rc3 |
| linux | linux kernel | Versi 7.1 rc4 |
| linux | linux kernel | Versi 7.1 rc5 |
Referensi dan perbaikan
- https://git.kernel.org/stable/c/39e295a91e80f3b91f61c7ada2bde434dcaba20d patch
- https://git.kernel.org/stable/c/57f332af1745014cd7e40414814ffaa6bc7d3b5b patch
- https://git.kernel.org/stable/c/6cb48f8890f9b2051d7c34823057296a536a31c5 patch
- https://git.kernel.org/stable/c/90dbad14b109e5fdfb4934ff61e561d11ba3742d patch
- https://git.kernel.org/stable/c/915b36d701950503c4ea0f6e314b10868e59fce3 patch
- https://git.kernel.org/stable/c/94edbbc5fe00d03cfe1d4e690d7d2cd36317a935 patch
- https://git.kernel.org/stable/c/bd2ddb3fe9052ad8703593bbec26ecc7ca92869e patch
- https://git.kernel.org/stable/c/d8fdf33d6fcfb90cbec26299baf2352c84b2d768 patch
Sumber:
NVD ·
CVE.org
· EPSS.
Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 31 Okt 2026, 06:25 WITA.
Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.