CVE-2026-74681usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT endpoint size. Both are taken independently from different endpoints in usbio_probe(), so the check is wrong when they differ. Use rxbuf_len for the IN direction. This matches the buffer that actually holds the response data.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 22, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 121a0f839dbb397af5fabb701cea3e9983223e50 before ebfd1e82ab0a6d26efd9bdd89de899215851f5bf; 121a0f839dbb397af5fabb701cea3e9983223e50 builds before 9ad0164f78b66b0b5eca3a5748cc94dd87e28124; 121a0f839dbb397af5fabb701cea3e9983223e50 builds before 7e22c9f79b200672f3e477421b6c9050d8cf70a5 | CNA record |
References
- https://git.kernel.org/stable/c/ebfd1e82ab0a6d26efd9bdd89de899215851f5bf
- https://git.kernel.org/stable/c/9ad0164f78b66b0b5eca3a5748cc94dd87e28124
- https://git.kernel.org/stable/c/7e22c9f79b200672f3e477421b6c9050d8cf70a5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.