CVE-2026-64336

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
25/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> USB: serial: keyspan_pda: fix information leak<br /> <br /> The write() callback is supposed to return the number of characters<br /> accepted or a negative errno. Since the addition of write fifo support<br /> the keyspan_pda implementation will however return the number characters<br /> submitted to the device if the write urb is not already in use. If this<br /> number is larger than the number of characters passed to write(), the<br /> line discipline continues writing data from beyond the tty write buffer.<br /> <br /> Fix the information leak by making sure that keyspan_pda_write_start()<br /> returns zero on success as intended.

Impact