Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63957

In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller size.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cdcdd658c5f51672cf72204163cea946c52de1a9bcef9c8882cd0257456367ec
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/serial/safe_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"sem…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/serial/safe_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e3a1d6eee25dc96b1d2db0ecd9d8741e92056476","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c7336c0fba5c959249f3d793d33076b992ec3ee4","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4","status":"affected","version":"1da177e4c3f41…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/serial/safe_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"sem…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/serial/safe_serial.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e3a1d6eee25dc96b1d2db0ecd9d8741e92056476","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c7336c0fba5c959249f3d793d33076b992ec3ee4","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4","status":"affected","version":"1da177e4c3f41…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/438061ed1ad85e6743e2dce826671772d81089ec"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/857b3cc73f91871ae4433f8b97c4670b78f8dc96"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/9b3145b3001fb24de1da72d1deb0bea70e5a078b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a550ed2117ca4709d38f713933ff924a83942e41"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c7336c0fba5c959249f3d793d33076b992ec3ee4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/e3a1d6eee25dc96b1d2db0ecd9d8741e92056476"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f793b67d41e5fab719c5a90baa77cbd2fe259517"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1ca458f59f4cfe9c60aa7a7bbabebfc5d8343f9f77e806910bcd1eda499ca44d · sha256:a72f6d7d16ac5b8b… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer