CVE-2026-64335
Low
No strong exploitation signal.
CVSS base
5.5
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS — probability of exploitation (30 days)
0.1%
2.4th percentile
CISA KEV
Not listed
Weakness / dates
—
Published 2026-07-25 · modified 2026-09-03
CVSS breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | L | Local |
| Attack Complexity | L | Low |
| Privileges Required | L | Low |
| User Interaction | N | None |
| Scope | U | Unchanged |
| Confidentiality | N | None |
| Integrity | N | None |
| Availability | H | High |
Timeline
- 2026-07-25 — Published (NVD)
- 2026-09-03 — Last modified (NVD)
Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix broken rx after throttle If the port is closed while throttled, the read urb is never resubmitted and the port will not receive any further data until the device is reconnected (or the driver is rebound). Clear the throttle flags and submit the urb if needed when opening the port.
Affected
References
- https://git.kernel.org/stable/c/4f3f6f44db71e469933a7c36c5d57d937ba0a21b
- https://git.kernel.org/stable/c/61954033326fc7e637ed2aeeb4b52021e0ee4657
- https://git.kernel.org/stable/c/83a3dfc018943b05b6daf3a6f891833e1aabfa1f
- https://git.kernel.org/stable/c/8d50a910194f66566a5eb252b33283855c8d5203
- https://git.kernel.org/stable/c/92fa3e1a49848509ea3f7995751963fc65095998
- https://git.kernel.org/stable/c/abacd67e6f689c62d8a13e3da25f4272bc9ad4af
- https://git.kernel.org/stable/c/d5d2660caef78d4c996d34d123574c8e86f5b5ac
- https://git.kernel.org/stable/c/eab394781e9321c0c7e97a24fd092387cb262f40