CVE-2026-64333General(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer corruption The digi_write_inb_command() is supposed to wait for the write urb to become available or return an error, but instead it updates the transfer buffer and tries to resubmit the urb on timeout. To make things worse, for commands like break control where no timeout is used, the driver would corrupt the urb immediately due to a broken jiffies comparison (on 32-bit machines this takes five minutes of uptime to trigger due to INITIAL_JIFFIES). Fix this by adding the missing return on timeout and waiting indefinitely when no timeout has been specified as intended. This issue was (sort of) flagged by Sashiko when reviewing an unrelated change to the driver.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-09-05); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-05: 1Mentions · 2026-09-06: 1Technical Details · 2026-09-05: 1Technical Details · 2026-09-06: 109-0509-06
Signal classification1 categories
General
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • ゆぅさん@YY20424277
    General

    もし自分の現場で「LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性(CVE-2026-64333)」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training

    Post summary

    The text is a general query about the first incident‑response step for CVE‑2026‑64333, providing only the vulnerability type without any PoC, exploit, patch or active‑exploitation details.

    00030137
    822 followersView on X
  • ゆぅさん@YY20424277
    General

    「LinuxのLinux Kernelにおける境界外書き込みに関する脆弱性(CVE-2026-64333)」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 書籍一覧(Kindle): https://www.intect-i.jp/book/?utm_source=sns&utm_medium=social&utm_campaign=kindle

    Post summary

    The post references CVE‑2026‑64333, a boundary‑write vulnerability in the Linux kernel, but offers only a very high‑level mention and lacks detailed technical, patch, or exploitation information.

    00020305
    823 followersView on X
CPE platform detail8 entries

8 of 8 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel2.6.12--
OSlinuxlinux_kernel7.2--
OSlinuxlinux_kernel7.2--

Explore more