Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-03-27 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23365 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23365 #CVE-2026-23365 #CVE #CyberSecurity #InfoSec https://t.co/wBg35rZVBP
Post summary
The tweet merely announces a new CVE with unknown risk and provides a link to the NVD, offering no additional technical or exploit details.
🛠️ Linux patched a USB driver trust bug… meanwhile Windows still feels like it’s betting your PC on first impressions. Malformed devices = instant chaos. Trust must be earned. https://windowsforum.com/threads/cve-2026-23365-linux-kalmia-usb-driver-fixes-endpoint-trust-crash.407498/ #LinuxKernelSecurity #Cve2026 #UsbEndpointValidation #UsbNetworkingDriver https://t.co/kWYebhTedY
Post summary
The tweet highlights that a Linux USB driver trust bug (CVE‑2026‑23365) has been patched, while hinting at ongoing Windows concerns.
CVE-2026-23365 In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is… https://www.cve.org/CVERecord?id=CVE-2026-23365
Post summary
CVE-2026-23365 in the Linux kernel driver has been fixed; the post does not provide a PoC, exploit detail, or evidence of in‑the‑wild attacks.
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 3.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |