THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-31607 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets from the network PDU.

[NVD] CVE-2026-31607 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets from the network PDU.

lownvdPublished 2026-04-24

CVE-2026-31607 CVSS: 9.8 CRITICAL Published: 2026-04-24T15:16:39.940

In the Linux kernel, the following vulnerability has been resolved:

usbip: validate number_of_packets in usbip_pack_ret_submit()

When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets from the network PDU. This value is subsequently used as the loop bound

Indicators of compromise

CVE-2026-31607cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-31607