The Linux kernel contained a vulnerability in the USB serial driver for digi_acceleport where missing sanity checks on bulk-out buffer sizes allowed potential out-of-bounds memory access or slab corruption. This could occur if a malicious USB device reported smaller buffer sizes than the driver expected. The fix involved adding the missing bulk-out buffer size sanity checks to prevent such memory corruption issues.

The vulnerability could allow a malicious USB device to cause out-of-bounds memory access or slab corruption in the kernel, potentially leading to system instability or security issues related to memory corruption. No known exploits are reported in the wild at this time.

A fix has been applied to the Linux kernel to add the missing bulk-out buffer size sanity checks in the digi_acceleport USB serial driver. Users should update their Linux kernel to a version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or kernel maintainers' advisory for the exact fixed versions and update accordingly.