CVE-2026-23365 — Improper Validation of Specified Type of Input in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
net: usb: kalmia: validate USB endpoints
The kalmia driver should validate that the device it is probing has the
proper number and types of USB endpoints it is expecting before it binds
to it. If a malicious device were to not have the same urbs the driver
will crash later on when it blindly accesses these endpoints.
Affected Packages5 packages
▶CVEListV5linux/linuxd40261236e8e278cb1936cb5e934262971692b10 — 28a380bfa5bc7f6a9380b85e8eab919ee6ac1701+6
🔴Vulnerability Details
3OSV▶
CVE-2026-23365: In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that th↗2026-03-25
GHSA▶
GHSA-m58v-8vcf-j347: In the Linux kernel, the following vulnerability has been resolved:
net: usb: kalmia: validate USB endpoints
The kalmia driver should validate that↗2026-03-25