Wind River Support Network

HomeDefectsLIN1025-16986

Acknowledged

LIN1025-16986 : Security Advisory - linux - CVE-2026-63956

Created: Aug 1, 2026 Updated: Aug 11, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  USB: serial: cypress_m8: fix memory corruption with small endpoint  Make sure that the interrupt-out endpoint max packet size is at least eight bytes to avoid user-controlled slab corruption or NULL-pointer dereference should a malicious device report a smaller size.