Skip to main content
CVE-2026-64334VulnerabilityPublished 07/25/2026

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on…

Source GCVE Database

0

Not known to be exploited.

Data as of 10/24/2026, 22:16:04 UTC

Severity
Medium

No CVSS score from NVD or the CNA

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.09% chance of exploitation in 30 days – higher than 0% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

What to do

AI-suggested

A fix for this vulnerability has been implemented in the Linux kernel. Users should update to the fixed kernel version once available. Since this is a kernel driver issue, applying the official kernel update is the recommended remediation. No additional mitigations are specified.

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.

Impact

If exploited, this vulnerability could cause a system hard lockup (hang) when a digi_acceleport USB serial device is disconnected, potentially leading to denial of service. There is no indication of code execution or data corruption. No known exploits are reported in the wild.

References

Community reviews

Loading reviews…