Skip to main content

Linux Kernel EUVDEUVD-2026-48878

| CVE-2026-64334 MEDIUM
Improper Locking (CWE-667)
2026-07-25 Linux GHSA-v647-r38j-39fq
Denial Of Service Linux Red Hat Suse
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local attack vector with low-privilege user access to USB serial device; no confidentiality or integrity impact, only hard-lockup DoS.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
4.6 MEDIUM
AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

6
Metadata Corrected
Sep 03, 2026 - 16:40 vuln.today
tag: Information Disclosure replaced by Denial Of Service
Analysis Generated
Sep 03, 2026 - 16:19 vuln.today
CVSS changed
Sep 03, 2026 - 16:07 NVD
5.5 (MEDIUM)
Patch available
Jul 25, 2026 - 11:18 EUVD
CVE Published
Jul 25, 2026 - 08:50 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 25, 2026 - 08:50 nvd
MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix hard lockup on disconnect

If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled.

Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect.

This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.

AnalysisAI

Hard lockup in the Linux kernel's digi_acceleport USB serial driver causes full system freeze when a Digi AccelePort device is physically disconnected during active I/O. The driver's OOB (out-of-band) command path loops indefinitely with interrupts disabled upon persistent URB submission failure, resulting in a kernel hard lockup that effectively crashes the host. Systems with this specific USB-to-serial adapter are affected across a wide range of stable kernel branches from 2.6.12 onward; patches have been released across all active stable series.

Technical ContextAI

The digi_acceleport driver (drivers/usb/serial/digi_acceleport.c) handles USB serial communication for Digi International AccelePort adapters. When sending OOB commands (used during open(), set_termios(), and close() operations), the driver submits URBs via usb_submit_urb(). Prior to the fix, if the device was disconnecting and urb submission failed persistently, the code retried in a tight loop without checking the return value, spinning indefinitely with interrupts disabled - a condition classified under CWE-667 (Improper Locking). CWE-667 covers situations where a thread fails to release or properly manage a synchronization primitive, here manifested as infinite interrupt-disabled spinning rather than a classical mutex deadlock. The CPE (cpe:2.3:a:linux:linux) identifies all Linux kernel versions back to the initial git history commit (1da177e4c3f4), with stable-branch fixes backported across 5.10, 5.15, 6.1, 6.6, 6.12, 6.18, and mainline 7.x series.

RemediationAI

Apply the appropriate stable-branch kernel update: 5.10.261 or later, 5.15.212 or later, 6.1.178 or later, 6.6.145 or later, 6.12.96 or later, 6.18.39 or later, or 7.1.4+ (mainline). Upstream fix commits are available at git.kernel.org stable references (e.g., https://git.kernel.org/stable/c/6e51147c2744d15730084dc89cc99180d3de4184 for one branch). If immediate patching is not feasible, blacklisting the digi_acceleport kernel module (add 'blacklist digi_acceleport' to /etc/modprobe.d/) eliminates the attack surface at the cost of losing Digi AccelePort functionality. Systems without Digi AccelePort hardware present need not take any action.

Same weakness CWE-667 – Improper Locking

View all
CVE-2025-43510 HIGH POC
7.8
CVE-2019-5886 CRITICAL POC
9.8
CVE-2020-13246 HIGH POC
7.5
CVE-2019-15513 HIGH POC
7.5
CVE-2019-11599 HIGH POC
7.0
CVE-2023-21400 MEDIUM POC
6.7
CVE-2021-20291 MEDIUM POC
6.5
CVE-2026-53049 CRITICAL
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.208 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.184 Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.218 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.186 Affected
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.237 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.180 Affected
SUSE Linux Enterprise Real Time 15 SP7 SUSE Real Time Module 15 SP7 Fixed
SUSE Linux Micro 6.0 Fixed

Share

EUVD-2026-48878 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy