In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the… (CVE-2026-64334)
A vulnerability in the Linux kernel's USB serial driver for digi_acceleport caused a hard lockup when the device was disconnected. The issue occurred because the driver would loop indefinitely with interrupts disabled if an out-of-band (OOB) write urb submission failed persistently, such as during device disconnect. This could cause the system to hang during operations like open(), set_termios(), or close() racing with a physical disconnect. The vulnerability has been fixed by adding checks for urb submission errors to prevent the hang.
AI Analysis
Technical Summary
The Linux kernel's USB serial driver digi_acceleport had a vulnerability where persistent failure in submitting an out-of-band write urb (USB Request Block) during device disconnect caused the driver to enter an infinite loop with interrupts disabled, resulting in a hard lockup of the system. The fix involves checking for urb submission errors when sending OOB commands to avoid hanging if operations race with a physical device disconnect. This issue was identified during a code review and has been resolved in the kernel.
Potential Impact
If exploited, this vulnerability could cause a system hard lockup (hang) when a digi_acceleport USB serial device is disconnected, potentially leading to denial of service. There is no indication of code execution or data corruption. No known exploits are reported in the wild.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should update to the fixed kernel version once available. Since this is a kernel driver issue, applying the official kernel update is the recommended remediation. No additional mitigations are specified.
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the… (CVE-2026-64334)
Description
A vulnerability in the Linux kernel's USB serial driver for digi_acceleport caused a hard lockup when the device was disconnected. The issue occurred because the driver would loop indefinitely with interrupts disabled if an out-of-band (OOB) write urb submission failed persistently, such as during device disconnect. This could cause the system to hang during operations like open(), set_termios(), or close() racing with a physical disconnect. The vulnerability has been fixed by adding checks for urb submission errors to prevent the hang.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's USB serial driver digi_acceleport had a vulnerability where persistent failure in submitting an out-of-band write urb (USB Request Block) during device disconnect caused the driver to enter an infinite loop with interrupts disabled, resulting in a hard lockup of the system. The fix involves checking for urb submission errors when sending OOB commands to avoid hanging if operations race with a physical device disconnect. This issue was identified during a code review and has been resolved in the kernel.
Potential Impact
If exploited, this vulnerability could cause a system hard lockup (hang) when a digi_acceleport USB serial device is disconnected, potentially leading to denial of service. There is no indication of code execution or data corruption. No known exploits are reported in the wild.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should update to the fixed kernel version once available. Since this is a kernel driver issue, applying the official kernel update is the recommended remediation. No additional mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-v647-r38j-39fq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64334"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420b9c2644c7f8084d46
Added to database: 07/25/2026, 23:08:59 UTC
Last enriched: 07/25/2026, 23:30:58 UTC
Last updated: 07/26/2026, 03:44:30 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.