CVE-2026-63957
Published Jul 19, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: safe_serial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab corruption in "safe" mode should a malicious device report a smaller size.
Is your site exposed to CVE-2026-63957?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/161ea0e5236f5f051d2d85d6c54dd08ee9dc7ba4
https://git.kernel.org/stable/c/438061ed1ad85e6743e2dce826671772d81089ec
https://git.kernel.org/stable/c/857b3cc73f91871ae4433f8b97c4670b78f8dc96
https://git.kernel.org/stable/c/9b3145b3001fb24de1da72d1deb0bea70e5a078b
https://git.kernel.org/stable/c/a550ed2117ca4709d38f713933ff924a83942e41
https://git.kernel.org/stable/c/c7336c0fba5c959249f3d793d33076b992ec3ee4
https://git.kernel.org/stable/c/e3a1d6eee25dc96b1d2db0ecd9d8741e92056476
https://git.kernel.org/stable/c/f793b67d41e5fab719c5a90baa77cbd2fe259517
Frequently Asked Questions
What is CVE-2026-63957? +
In the Linux kernel, the following vulnerability has been resolved:
USB: serial: safe_serial: fix memory corruption with small endpoint
Make sure that the bulk-out buffer size is at least eight bytes to avoid
user-controlled slab corruption in "safe" mode should a malicious device
report a smaller size.
How do I check if I'm vulnerable to CVE-2026-63957? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.