CVE-2026-45923 net: usb: catc: enable basic endpoint checking
A malformed USB device can cause a denial of service in the Linux kernel catc driver due to missing endpoint descriptor validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-45923?
CVE-2026-45923 is a medium-severity vulnerability in Linux kernel, published on 27 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: usb: catc: enable basic endpoint checking
catc_probe() fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors:
- usb_sndbulkpipe(usbdev, 1) and usb_rcvbulkpipe(usbdev, 1) for TX/RX - usb_rcvintpipe(usbdev, 2) for interrupt status
A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes.
Add a catc_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls after usb_set_interface() to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time.
Similar to - commit 90b7f2961798 ("net: usb: rtl8150: enable basic endpoint checking") which fixed the issue in rtl8150.
Which versions are affected by CVE-2026-45923?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-45923?
Apply the vendor's patch.
Is CVE-2026-45923 being exploited?
There is no known exploitation of CVE-2026-45923 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-45923, DEBIAN-CVE-2026-45923, GHSA-f555-jxrw-hv6g, ROOT-OS-UBUNTU-2204-CVE-2026-45923, ROOT-OS-UBUNTU-2404-CVE-2026-45923, UBUNTU-CVE-2026-45923.