Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64336

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> USB: serial: keyspan_pda: fix information leak<br /> <br /> The write() callback is supposed to return the number of characters<br /> accepted or a negative errno. Since the addition of write fifo support<br /> the keyspan_pda implementation will however return the number characters<br /> submitted to the device if the write urb is not already in use. If this<br /> number is larger than the number of characters passed to write(), the<br /> line discipline continues writing data from beyond the tty write buffer.<br /> <br /> Fix the information leak by making sure that keyspan_pda_write_start()<br /> returns zero on success as intended.

Impacto