CVE-2026-64334
Received Received - Intake

USB: serial: digi_acceleport hard lockup on disconnect

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix hard lockup on disconnect If submitting the OOB write urb fails persistently (e.g if the device is being disconnected) the driver would loop indefinitely with interrupts disabled. Check for urb submission errors when sending OOB commands to avoid hanging if, for example, open(), set_termios() or close() races with a physical disconnect. This is issue was flagged by Sashiko when reviewing an unrelated change to the driver.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64334
EUVD
EUVD-2026-48878

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the USB serial driver for Digi AccelePort devices. When sending out-of-band (OOB) commands fails, such as during a device disconnect, the driver enters an infinite loop with interrupts disabled, causing a system hang.

Detection Guidance

This vulnerability is specific to the Linux kernel's USB serial driver (digi_acceleport). Detection requires checking kernel logs for hard lockups during USB device disconnects or errors in urb submission for OOB commands. Monitor system logs for messages indicating USB disconnect issues or driver hangs.

Impact Analysis

This vulnerability can cause your system to freeze or become unresponsive if a Digi AccelePort USB device is disconnected while the driver is processing commands. This may lead to a denial of service on the affected system.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this issue. If immediate patching is not possible, avoid using the affected digi_acceleport USB serial devices until patched. Monitor vendor advisories for kernel updates addressing this vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64334. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart