Bug 2507189 (CVE-2026-64334) - CVE-2026-64334 kernel: USB: serial: digi_acceleport: fix hard lockup on disconnect
Summary: CVE-2026-64334 kernel: USB: serial: digi_acceleport: fix hard lockup on disco...
Keywords:
Status: NEW
Alias: CVE-2026-64334
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-25 10:09 UTC by OSIDB Bzimport
Modified: 2026-07-29 11:30 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-25 10:09:42 UTC
In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix hard lockup on disconnect

If submitting the OOB write urb fails persistently (e.g if the device is
being disconnected) the driver would loop indefinitely with interrupts
disabled.

Check for urb submission errors when sending OOB commands to avoid
hanging if, for example, open(), set_termios() or close() races with a
physical disconnect.

This is issue was flagged by Sashiko when reviewing an unrelated change
to the driver.


Note You need to log in before you can comment on or make changes to this bug.