Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux USB driver may misread incoming data size
published 2 months ago
Summary
The built-in USB driver in the Linux operating system could compare the size of data it receives with the wrong value, leading to communication errors with connected devices. This mismatch might cause data to be lost or commands to fail. Updating the Linux system to the latest kernel version that includes the fix will correct the size check and prevent the issue.
What to do
- Update linux kernel to version 7.1.9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Linux | linux | kernel |
>= 6.19.0, < 7.1.9 Fix: upgrade to 7.1.9
|
Original advisory text
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
In the Linux kernel, the following vulnerability has been resolved:
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check
in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT
endpoint size. Both are taken independently from different endpoints
in usbio_probe(), so the check is wrong when they differ.
Use rxbuf_len for the IN direction. This matches the buffer that
actually holds the response data.
usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg
ibuf_len is the bulk IN (receive) buffer size, but the EMSGSIZE check
in usbio_bulk_msg() compares it against txbuf_len — the bulk OUT
endpoint size. Both are taken independently from different endpoints
in usbio_probe(), so the check is wrong when they differ.
Use rxbuf_len for the IN direction. This matches the buffer that
actually holds the response data.
References
- https://git.kernel.org/stable/c/7e22c9f79b200672f3e477421b6c9050d8cf70a5 URL
- https://git.kernel.org/stable/c/9ad0164f78b66b0b5eca3a5748cc94dd87e28124 URL
- https://git.kernel.org/stable/c/ebfd1e82ab0a6d26efd9bdd89de899215851f5bf URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74681... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-74681 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Timeline
Published22 Aug 2026
Updated27 Aug 2026
First seen27 Aug 2026
Track software like this
Free during beta