The Linux kernel's USB serial mxuport driver had a vulnerability where it did not properly validate the bulk-out endpoint max packet size. If a malicious USB device reported a max packet size smaller than eight bytes, it could cause memory corruption in the kernel's slab allocator. The vulnerability was fixed by enforcing a minimum packet size of eight bytes for the bulk-out endpoint, preventing this user-controlled memory corruption scenario.

This vulnerability could allow a malicious USB device to cause memory corruption in the Linux kernel, potentially leading to system instability or escalation of privileges. However, no known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to validate the bulk-out endpoint max packet size and prevent memory corruption. Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in this data; check the vendor advisory for current remediation guidance.