THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-53196 (MEDIUM 6.8) — In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which is sizeof(struct e

[NVD] CVE-2026-53196 (MEDIUM 6.8) — In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_ti: fix heap overflow in get_manuf_info() get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which is sizeof(struct e

lownvdPublished 2026-06-25

CVE-2026-53196 CVSS: 6.8 MEDIUM Published: 2026-06-25T09:16:37.107

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: io_ti: fix heap overflow in get_manuf_info()

get_manuf_info() reads le16_to_cpu(rom_desc->Size) bytes from the device I2C EEPROM into a buffer allocated with kmalloc_obj(), which is sizeof(struct edge_ti_manuf_descriptor) = 10 bytes.

The Size field

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-53196