exploitDog

CVE-2026-23365

Опубликовано: 25 мар. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

net: usb: kalmia: validate USB endpoints

The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.0.1 (включая) до 5.10.253 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.203 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.167 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.130 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.77 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.17 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.7 (исключая)

cpe:2.3:o:linux:linux_kernel:3.0:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00129

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2026-23365

CVSS3: 5.5

ubuntu

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

CVE-2026-23365

CVSS3: 5.5

redhat

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

CVE-2026-23365

CVSS3: 5.5

msrc

3 месяца назад

net: usb: kalmia: validate USB endpoints

CVE-2026-23365

CVSS3: 5.5

debian

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: n ...

GHSA-m58v-8vcf-j347

CVSS3: 5.5

github

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

EPSS

Процентиль: 3%

0.00129

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo