Security Advisory
CVE-2026-63956
N/A
UNKNOWN
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: cypress_m8: fix memory corruption with small endpoint
Make sure that the interrupt-out endpoint max packet size is at least
eight bytes to avoid user-controlled slab corruption or NULL-pointer
dereference should a malicious device report a smaller size.
Published Date
July 19, 2026
Official Source
NIST NVD Advisory