In the Linux kernel, the following vulnerability has been resolved:

net: usb: kaweth: validate USB endpoints

The kaweth driver should validate that the device it is probing has the
proper number and types of USB endpoints it is expecting before it binds
to it. If a malicious device were to not have the same urbs the driver
will crash later on when it blindly accesses these endpoints.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00024.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 7c7ebf5e45d2504d92ea294ac3828d58586491df
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 72f90f481c6a059680b9b976695d4cfb04fba1f3
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < f33e80d195a003b384620ee240f69092b519146b
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 2795fc06e7652c0ba299d936c584d5e08b6b57a1
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0aae18e4638a7c1c579df92bc6edc36cedfaaa8c
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 4b063c002ca759d1b299988ee23f564c9609c875
Linux Linux affected
Version Status Constraints
2.6.12 affected —
0 unaffected < 2.6.12
6.1.167 unaffected ≤ 6.1.*
6.6.130 unaffected ≤ 6.6.*
6.12.77 unaffected ≤ 6.12.*
6.18.17 unaffected ≤ 6.18.*
6.19.7 unaffected ≤ 6.19.*
7.0-rc2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0aae18e4638a7c1c579df92bc6edc36cedfaaa8c cve-icon cve-icon
https://git.kernel.org/stable/c/2795fc06e7652c0ba299d936c584d5e08b6b57a1 cve-icon cve-icon
https://git.kernel.org/stable/c/4b063c002ca759d1b299988ee23f564c9609c875 cve-icon cve-icon
https://git.kernel.org/stable/c/72f90f481c6a059680b9b976695d4cfb04fba1f3 cve-icon cve-icon
https://git.kernel.org/stable/c/7c7ebf5e45d2504d92ea294ac3828d58586491df cve-icon cve-icon
https://git.kernel.org/stable/c/f33e80d195a003b384620ee240f69092b519146b cve-icon cve-icon
History

Wed, 25 Mar 2026 10:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: validate USB endpoints The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.
Title net: usb: kaweth: validate USB endpoints
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-03-25T10:27:07.916Z

Reserved: 2026-01-13T15:37:45.994Z

Link: CVE-2026-23312

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-25T11:16:27.463

Modified: 2026-03-25T11:16:27.463

Link: CVE-2026-23312

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.