https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:49:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-45923 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: usb: catc: enable basic endpoint checking</p> <p>catc_probe() fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors:</p> <p>- usb_sndbulkpipe(usbdev, 1) and usb_rcvbulkpipe(usbdev, 1) for TX/RX - usb_rcvintpipe(usbdev, 2) for interrupt status</p> <p>A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes.</p> <p>Add a catc_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls after usb_set_interface() to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time.</p> <p>Similar to - commit 90b7f2961798 (&#34;net: usb: rtl8150: enable basic endpoint checking&#34;) which fixed the issue in rtl8150.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: usb: catc: enable basic endpoint checking</p> <p>catc_probe() fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors:</p> <p>- usb_sndbulkpipe(usbdev, 1) and usb_rcvbulkpipe(usbdev, 1) for TX/RX - usb_rcvintpipe(usbdev, 2) for interrupt status</p> <p>A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes.</p> <p>Add a catc_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls after usb_set_interface() to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time.</p> <p>Similar to - commit 90b7f2961798 (&#34;net: usb: rtl8150: enable basic endpoint checking&#34;) which fixed the issue in rtl8150.</p> https://vulnerability.circl.lu/vuln/cve-2026-45923