CVE-2026-64335 Linux CVE debrief

Who should care

Users of the Linux kernel with the USB: serial: digi_acceleport driver may be affected by this vulnerability. Operators and security teams should review the official advisory to determine the affected scope and severity. Vulnerability management and platform teams should prioritize patching or mitigating this vulnerability.

Technical summary

The Linux kernel's USB: serial: digi_acceleport driver had a vulnerability where the port would not receive data after being closed while throttled. The issue is resolved by clearing throttle flags and resubmitting the urb when the port is opened. This vulnerability affects users of the Linux kernel with the USB: serial: digi_acceleport driver. The vulnerability was resolved by fixing the rx path to properly handle throttle conditions, ensuring data reception resumes after port reopening. Operators and security teams should review official advisories for detailed impact and mitigation strategies. Evidence from the CVE record and NVD entry supports this technical summary, but additional verification is recommended.

Defensive priority

Medium

Recommended defensive actions

• Update the Linux kernel to the latest version
• Verify and apply the patch for the USB: serial: digi_acceleport driver
• Monitor for any suspicious activity related to the USB: serial: digi_acceleport driver
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-25T10:17:15.337Z and has not been modified since then. The NVD entry is currently Received. There is limited information available about the vulnerability, and defenders should verify the affected scope and severity with the official advisory. The Linux kernel's USB: serial: digi_acceleport driver had a vulnerability where the port would not receive data after being closed while throttled.

Official resources