CVE-2026-23334

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

can: usb: f81604: handle short interrupt urb messages properly

If an interrupt urb is received that is not the correct length, properly detect it and don't attempt to treat the data as valid.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 88da17436973e463bed59bea79771fb03a21555e, < 9b740ff5bc649575a5e14ca8ee54e3dd5010aaf0; >= 88da17436973e463bed59bea79771fb03a21555e, < c5d69da6c919648838734097861e979677eedcde; >= 88da17436973e463bed59bea79771fb03a21555e, < 36ead57443146e6b730ce1f48ca3e9b17e19a3d2; >= 88da17436973e463bed59bea79771fb03a21555e, < 66615e6293388f75a56226d1216fd9cfb3d95e05; >= 88da17436973e463bed59bea79771fb03a21555e, < 7299b1b39a255f6092ce4ec0b65f66e9d6a357af
LinuxLinux6.5

References

Timeline

Published
Mar 25, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-233355.5In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() struct irdCVE-2026-233367.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() There iCVE-2026-233375.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_cCVE-2026-233385.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Do not allow userspace to trivially triger kernel warCVE-2026-233395.5In the Linux kernel, the following vulnerability has been resolved: nfc: nci: free skb on nci_transceive early error paths nci_transceive(CVE-2026-23349.4An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation CVE-2026-233407.8In the Linux kernel, the following vulnerability has been resolved: net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless CVE-2026-233415.5In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix crash when destroying a suspended hardware context CVE-2026-233424.7In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMPT_RT kernels, the per-CCVE-2026-233437.8In the Linux kernel, the following vulnerability has been resolved: xdp: produce a warning when calculated tailroom is negative Many etherCVE-2026-233447.8In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix use-after-free on error path In the error path of seCVE-2026-233455.5In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mappings if FEAT_LPA2 is enabl
CVE-2026-23334: Medium severity, CVSS 5.5 | Vulnix