In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the port is closed… (CVE-2026-64335)
A vulnerability in the Linux kernel's USB serial driver for digi_acceleport was resolved. The issue caused the read urb (USB request block) to not be resubmitted if the port was closed while throttled, resulting in no further data reception until device reconnection or driver rebinding. The fix clears throttle flags and submits the urb as needed when opening the port.
AI Analysis
Technical Summary
The Linux kernel's USB serial driver digi_acceleport had a flaw where closing the port during a throttle state prevented the read urb from being resubmitted. This caused the port to stop receiving data until the device was reconnected or the driver was rebound. The vulnerability was addressed by clearing throttle flags and ensuring the urb is submitted upon port opening, restoring normal data flow.
Potential Impact
Affected systems using the digi_acceleport USB serial driver could experience a denial of service in data reception on the affected port, requiring manual intervention (device reconnection or driver rebinding) to restore functionality. There is no indication of code execution or data corruption.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue. Users should update to the kernel version containing this fix. Since this is a kernel driver issue, updating the kernel to a version including the patch is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory for the exact fixed version and update accordingly.
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the port is closed… (CVE-2026-64335)
Description
A vulnerability in the Linux kernel's USB serial driver for digi_acceleport was resolved. The issue caused the read urb (USB request block) to not be resubmitted if the port was closed while throttled, resulting in no further data reception until device reconnection or driver rebinding. The fix clears throttle flags and submits the urb as needed when opening the port.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's USB serial driver digi_acceleport had a flaw where closing the port during a throttle state prevented the read urb from being resubmitted. This caused the port to stop receiving data until the device was reconnected or the driver was rebound. The vulnerability was addressed by clearing throttle flags and ensuring the urb is submitted upon port opening, restoring normal data flow.
Potential Impact
Affected systems using the digi_acceleport USB serial driver could experience a denial of service in data reception on the affected port, requiring manual intervention (device reconnection or driver rebinding) to restore functionality. There is no indication of code execution or data corruption.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue. Users should update to the kernel version containing this fix. Since this is a kernel driver issue, updating the kernel to a version including the patch is the recommended remediation. Patch status is not explicitly confirmed in the provided data; users should consult the Linux kernel vendor advisory for the exact fixed version and update accordingly.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pfpg-cf3x-8p3v
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64335"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420b9c2644c7f8084d74
Added to database: 07/25/2026, 23:08:59 UTC
Last enriched: 07/25/2026, 23:31:31 UTC
Last updated: 07/26/2026, 03:46:37 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.