01 Record

CVE-2026-64240

media: rc: igorplugusb: fix control request setup packet

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

media: rc: igorplugusb: fix control request setup packet

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.11% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.4% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-08-13.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-24 15:27Z3 MO AGO

Last updated

2026-07-24 15:27Z3 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')Base

Data version

5.2

Document digest

48282ac2f22681ec49ba70d50f713094c5c9fc862acc975f567f0d9bcec2079d

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxbc04b8633b375af6ac8a8bb615258b80fe06cdaa to < e823e4294511989f5962e7ad85bf4d179ba74f52, 81f0fb813e4bf28b3ca28dc218938a32eb48f740 to < 2243ad78ce64d344754260533ae7730c2174a34a, 0e84aa8fc23c7578f105e3a2160f9d0aa2bed79a to < aa22590a16e51455c6db802c774b31aadc604a9a, 18d6a7c9e4e63c57157e9a57dd9bf3cd38e4c45a to < 060fca8e098387f949e4eedaf215d952e477ac12, 0be8fcd9005e3d3b5a61fe34b070a9663adbb4dc to < 0d880d2db9856e94127ab09331363bef59f98005, 0adac0ee2c42027d80bac02ea9b576a88f8955d3 to < f33b5a61673bd220fdaaf4202cf1013d6d66c943, a62ca67e3c72fb297dc7c86495ba8f7329d7f150 to < 5cc3f6db72f77d1a8f7f1cf4ac01803927ffdf15, eac69475b01fe1e861dfe3960b57fa95671c132e to < 171022c7d594c133a45f92357a2a91475edabe20, 6.6.140 to < 6.6.143, 6.12.86 to < 6.12.93, 6.18.27 to < 6.18.35, 7.0.4 to < 7.0.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/e823e4294511989f5962e7ad85bf4d179ba74f52
git.kernel.orghttps://git.kernel.org/stable/c/2243ad78ce64d344754260533ae7730c2174a34a
git.kernel.orghttps://git.kernel.org/stable/c/aa22590a16e51455c6db802c774b31aadc604a9a
git.kernel.orghttps://git.kernel.org/stable/c/060fca8e098387f949e4eedaf215d952e477ac12
git.kernel.orghttps://git.kernel.org/stable/c/0d880d2db9856e94127ab09331363bef59f98005
git.kernel.orghttps://git.kernel.org/stable/c/f33b5a61673bd220fdaaf4202cf1013d6d66c943
git.kernel.orghttps://git.kernel.org/stable/c/5cc3f6db72f77d1a8f7f1cf4ac01803927ffdf15
git.kernel.orghttps://git.kernel.org/stable/c/171022c7d594c133a45f92357a2a91475edabe20

07 Fixed in

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.