CVE-2026-64334 - Vulnerability Details

- USB: serial: digi_acceleport: fix hard lockup on disconnect

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix hard lockup on disconnect

If submitting the OOB write urb fails persistently (e.g if the device is
being disconnected) the driver would loop indefinitely with interrupts
disabled.

Check for urb submission errors when sending OOB commands to avoid
hanging if, for example, open(), set_termios() or close() races with a
physical disconnect.

This is issue was flagged by Sashiko when reviewing an unrelated change
to the driver.

Published: 2026-07-25

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6e51147c2744d15730084dc89cc99180d3de4184
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 6a8592ace932081ea11aea41c460a1ca0f6344a4
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 5a82d842e8c35227d7227f19e5e654df1451782c
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< bcfeae431db9986c2b313e6a760f2ac8df61e138
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2067b3838da6e4af03bae3630414193188d754b2
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2b7dc482f859f2d027db07ff0efc1c5df5b3451a
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 79bc131df0e50f8f663c1fdbbe952aaf193a8d39
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 5c1ea24b53bf3bfb859f0a05573997487975da23

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2-rc3`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6e51147c2744d15730084dc89cc99180d3de4184)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,6a8592ace932081ea11aea41c460a1ca0f6344a4)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,5a82d842e8c35227d7227f19e5e654df1451782c)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bcfeae431db9986c2b313e6a760f2ac8df61e138)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2067b3838da6e4af03bae3630414193188d754b2)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2b7dc482f859f2d027db07ff0efc1c5df5b3451a)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,79bc131df0e50f8f663c1fdbbe952aaf193a8d39)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,5c1ea24b53bf3bfb859f0a05573997487975da23)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.12`	affected	semver	—
`[0,2.6.12)`	unaffected	semver	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.96,6.13.0)`	unaffected	semver	—
`[6.18.39,6.19.0)`	unaffected	semver	—
`[7.1.4,7.2.0)`	unaffected	semver	—
`[7.2-rc3,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00177.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2067b3838da6e4af03bae3630414193188d754b2
https://git.kernel.org/stable/c/2b7dc482f859f2d027db07ff0efc1c5df5b3451a
https://git.kernel.org/stable/c/5a82d842e8c35227d7227f19e5e654df1451782c
https://git.kernel.org/stable/c/5c1ea24b53bf3bfb859f0a05573997487975da23
https://git.kernel.org/stable/c/6a8592ace932081ea11aea41c460a1ca0f6344a4
https://git.kernel.org/stable/c/6e51147c2744d15730084dc89cc99180d3de4184
https://git.kernel.org/stable/c/79bc131df0e50f8f663c1fdbbe952aaf193a8d39
https://git.kernel.org/stable/c/bcfeae431db9986c2b313e6a760f2ac8df61e138
https://lore.kernel.org/linux-cve-announce/2026072514-CVE-2026-64334-101f@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64334
https://www.cve.org/CVERecord?id=CVE-2026-64334

History

Wed, 29 Jul 2026 12:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-835
References		https://lore.kernel.org/linux-cve-announce/2026072514-CVE-2026-64334-101f@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64334 https://www.cve.org/CVERecord?id=CVE-2026-64334
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Mon, 27 Jul 2026 06:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-754

Sat, 25 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.
Title		USB: serial: digi_acceleport: fix hard lockup on disconnect
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2067b3838da6e4af03bae3630414193188d754b2 https://git.kernel.org/stable/c/2b7dc482f859f2d027db07ff0efc1c5df5b3451a https://git.kernel.org/stable/c/5a82d842e8c35227d7227f19e5e654df1451782c https://git.kernel.org/stable/c/5c1ea24b53bf3bfb859f0a05573997487975da23 https://git.kernel.org/stable/c/6a8592ace932081ea11aea41c460a1ca0f6344a4 https://git.kernel.org/stable/c/6e51147c2744d15730084dc89cc99180d3de4184 https://git.kernel.org/stable/c/79bc131df0e50f8f663c1fdbbe952aaf193a8d39 https://git.kernel.org/stable/c/bcfeae431db9986c2b313e6a760f2ac8df61e138

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:50:00.229Z

Updated: 2026-07-25T08:50:00.229Z

Reserved: 2026-07-19T15:36:31.781Z

Link: CVE-2026-64334

Vulnrichment

No data.

NVD

No data.

Redhat

Severity : Low

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64334 - Bugzilla

OpenCVE Enrichment

Updated: 2026-07-27T06:00:04Z

Weaknesses

CWE-754
Improper Check for Unusual or Exceptional Conditions
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object