In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that… (CVE-2026-63928)
A memory corruption vulnerability in the Linux kernel's USB serial omninet driver was resolved. The issue involved insufficient buffer size checks for bulk-out endpoints, which could lead to user-controlled slab corruption if a malicious USB device reported a smaller max packet size than expected. The vulnerability has been fixed by ensuring bulk-out buffers are at least as large as the hardcoded transfer size.
AI Analysis
Technical Summary
CVE-2026-63928 addresses a memory corruption vulnerability in the Linux kernel's USB serial omninet driver. The flaw occurs when the driver does not verify that bulk-out buffers are sufficiently large relative to the hardcoded transfer size. A malicious USB device reporting a smaller endpoint max packet size could trigger user-controlled slab corruption. The fix ensures that bulk-out buffers meet the required size to prevent this corruption.
Potential Impact
This vulnerability could allow a malicious USB device to cause memory corruption within the kernel, potentially leading to system instability or escalation of privileges. However, no known exploits in the wild have been reported, and the impact is limited to systems using the affected USB serial omninet driver.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to remediate the issue. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended mitigation.
In the Linux kernel, the following vulnerability has been resolved: USB: serial: omninet: fix memory corruption with small endpoint Make sure that… (CVE-2026-63928)
Description
A memory corruption vulnerability in the Linux kernel's USB serial omninet driver was resolved. The issue involved insufficient buffer size checks for bulk-out endpoints, which could lead to user-controlled slab corruption if a malicious USB device reported a smaller max packet size than expected. The vulnerability has been fixed by ensuring bulk-out buffers are at least as large as the hardcoded transfer size.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-63928 addresses a memory corruption vulnerability in the Linux kernel's USB serial omninet driver. The flaw occurs when the driver does not verify that bulk-out buffers are sufficiently large relative to the hardcoded transfer size. A malicious USB device reporting a smaller endpoint max packet size could trigger user-controlled slab corruption. The fix ensures that bulk-out buffers meet the required size to prevent this corruption.
Potential Impact
This vulnerability could allow a malicious USB device to cause memory corruption within the kernel, potentially leading to system instability or escalation of privileges. However, no known exploits in the wild have been reported, and the impact is limited to systems using the affected USB serial omninet driver.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to remediate the issue. Since this is a kernel-level vulnerability, updating to a patched kernel version is the recommended mitigation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-mmp6-qmxw-fp3c
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63928"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27ab2a4a8d598912ef2b
Added to database: 07/19/2026, 19:38:19 UTC
Last enriched: 07/19/2026, 20:07:06 UTC
Last updated: 07/20/2026, 20:11:12 UTC
Views: 16
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.