Skip to main content

Linux Kernel CVE-2026-64335

| EUVDEUVD-2026-48879 MEDIUM
2026-07-25 Linux GHSA-pfpg-cf3x-8p3v
Denial Of Service Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local-only attack via serial device node access (PR:L/AV:L); purely availability impact (DoS of serial RX); no confidentiality or integrity effect.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
3.3 LOW
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Metadata Corrected
Sep 03, 2026 - 16:40 vuln.today
tag: Information Disclosure replaced by Denial Of Service
Analysis Generated
Sep 03, 2026 - 16:20 vuln.today
CVSS changed
Sep 03, 2026 - 16:07 NVD
5.5 (MEDIUM)
Patch available
Jul 25, 2026 - 11:18 EUVD
CVE Published
Jul 25, 2026 - 08:50 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 25, 2026 - 08:50 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix broken rx after throttle

If the port is closed while throttled, the read urb is never resubmitted and the port will not receive any further data until the device is reconnected (or the driver is rebound).

Clear the throttle flags and submit the urb if needed when opening the port.

AnalysisAI

Availability loss in the Linux kernel's USB serial digi_acceleport driver allows a local user to permanently halt data reception on a Digi AccelePort serial port until the USB device is physically reconnected or the driver is rebound. The bug arises from a missing URB resubmission path: when a port is closed while in a throttled state, the read URB is never re-queued, leaving the port silently deaf to incoming data upon next open. No public exploit has been identified and EPSS sits at 0.22% (13th percentile), reflecting the niche hardware dependency and local-only attack surface.

Technical ContextAI

The digi_acceleport driver (drivers/usb/serial/digi_acceleport.c) manages USB serial communication for Digi International AccelePort USB adapter hardware. USB serial drivers use URBs (USB Request Blocks) as the mechanism to submit asynchronous read requests to the USB host controller. Flow control throttling suspends URB resubmission to apply backpressure; when throttle is cleared the driver is expected to restart the URB pipeline. The defect is a state-management gap: if the port close path executes while throttle flags are set, the URB is cancelled but the flag is never cleared; on subsequent open the driver does not detect the stale throttled state and therefore does not resubmit the read URB. The fix clears throttle flags and conditionally submits the URB during port open. CWE is recorded as N/A by the reporter, though CWE-672 (operation on resource after expiration or release) or CWE-664 (improper control of resource lifetime) would be applicable. The CPE cpe:2.3:a:linux:linux:* covers the Linux kernel from its initial git history commit.

RemediationAI

Upgrade to the applicable patched stable kernel release: 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.96, 6.18.39, 7.1.4, or 7.2-rc3, depending on the branch in use. Patch commits can be cherry-picked from git.kernel.org (e.g., https://git.kernel.org/stable/c/abacd67e6f689c62d8a13e3da25f4272bc9ad4af for one branch). For systems that cannot be patched immediately, a practical workaround is to unload and reload the digi_acceleport module (modprobe -r digi_acceleport && modprobe digi_acceleport) or to physically disconnect and reconnect the USB adapter to reset driver state after any throttle-triggered port closure. If the hardware is not present or the module is not needed, blacklisting digi_acceleport in /etc/modprobe.d/ eliminates exposure with no functional trade-off on systems that do not use Digi AccelePort adapters.

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Low
Product Status
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.208 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.184 Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.218 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.186 Affected
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.237 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.180 Affected
SUSE Linux Enterprise Real Time 15 SP7 SUSE Real Time Module 15 SP7 Fixed
SUSE Linux Micro 6.0 Fixed

Share

CVE-2026-64335 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy