CVE-2026-63898

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> USB: serial: mct_u232: fix memory corruption with small endpoint<br /> <br /> The driver overrides the maximum transfer size for a specific device<br /> which only accepts 16 byte packets for its 32 byte bulk-out endpoint.<br /> <br /> Make sure to never increase the maximum transfer size to prevent slab<br /> corruption should a malicious device report a smaller endpoint max<br /> packet size than expected.