CVE-2026-64333

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> USB: serial: digi_acceleport: fix write buffer corruption<br /> <br /> The digi_write_inb_command() is supposed to wait for the write urb to<br /> become available or return an error, but instead it updates the transfer<br /> buffer and tries to resubmit the urb on timeout.<br /> <br /> To make things worse, for commands like break control where no timeout<br /> is used, the driver would corrupt the urb immediately due to a broken<br /> jiffies comparison (on 32-bit machines this takes five minutes of uptime<br /> to trigger due to INITIAL_JIFFIES).<br /> <br /> Fix this by adding the missing return on timeout and waiting<br /> indefinitely when no timeout has been specified as intended.<br /> <br /> This issue was (sort of) flagged by Sashiko when reviewing an unrelated<br /> change to the driver.