01 Record

CVE-2026-23365

net: usb: kalmia: validate USB endpoints

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

net: usb: kalmia: validate USB endpoints

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 2.6% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-15.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-03-25 10:27Z7 MO AGO
Last updated: 2026-10-15 01:14Z14 DAYS AGO
Reserved: 2026-01-13
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: f7f61b6a2f3aac410c049ef69c1599f6b7e454203aff78a4d7030182bb42f6b0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd40261236e8e278cb1936cb5e934262971692b10 to < ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459, d40261236e8e278cb1936cb5e934262971692b10 to < 185050b47df3d41e49f20ad01beea2e7b9cddaa7, d40261236e8e278cb1936cb5e934262971692b10 to < 28a380bfa5bc7f6a9380b85e8eab919ee6ac1701, d40261236e8e278cb1936cb5e934262971692b10 to < 12c0243de0aee0ab27cc00932fd5edae65c1e3a2, d40261236e8e278cb1936cb5e934262971692b10 to < 51c20ea5f1555a984c041b0dbf56f00d41b9e652, d40261236e8e278cb1936cb5e934262971692b10 to < 011684cd18349aa4c52167c8ac37a0524169f48c, d40261236e8e278cb1936cb5e934262971692b10 to < 7bfda1a0be4caec3263753d567678451cef73a85, d40261236e8e278cb1936cb5e934262971692b10 to < c58b6c29a4c9b8125e8ad3bca0637e00b71e2693, 3.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ff675bc5b3e8c356f9d993d65d0bae6ed0dc7459
git.kernel.orghttps://git.kernel.org/stable/c/185050b47df3d41e49f20ad01beea2e7b9cddaa7
git.kernel.orghttps://git.kernel.org/stable/c/28a380bfa5bc7f6a9380b85e8eab919ee6ac1701
git.kernel.orghttps://git.kernel.org/stable/c/12c0243de0aee0ab27cc00932fd5edae65c1e3a2
git.kernel.orghttps://git.kernel.org/stable/c/51c20ea5f1555a984c041b0dbf56f00d41b9e652
git.kernel.orghttps://git.kernel.org/stable/c/011684cd18349aa4c52167c8ac37a0524169f48c
git.kernel.orghttps://git.kernel.org/stable/c/7bfda1a0be4caec3263753d567678451cef73a85
git.kernel.orghttps://git.kernel.org/stable/c/c58b6c29a4c9b8125e8ad3bca0637e00b71e2693
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-457936.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.170-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.85-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.