OCTOBER 21, 2026
Live Feed
Back to database
Case File

CVE-2026-64334

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Digi AccelePort USB serial driver in the Linux kernel, where a failure in submitting out-of-band (OOB) write requests during device disconnection can lead to an indefinite loop with interrupts disabled. This condition can cause system hard lockups, impacting system stability and availability. Organizations utilizing Linux systems with Digi AccelePort devices should prioritize this issue to prevent potential service disruptions.

CVE
CVE-2026-64334
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.