Medium 5.5Published May 27, 2026

CVE-2026-45923net: usb: catc: enable basic endpoint checking

Updated under an hour ago (Oct 26, 2026, 3:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking catc_probe() fills three URBs with hardcoded endpoint pipes without verifying the endpoint descriptors: - usb_sndbulkpipe(usbdev, 1) and usb_rcvbulkpipe(usbdev, 1) for TX/RX - usb_rcvintpipe(usbdev, 2) for interrupt status A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes. Add a catc_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls after usb_set_interface() to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time. Similar to - commit 90b7f2961798 ("net: usb: rtl8150: enable basic endpoint checking") which fixed the issue in rtl8150.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Undergoing Analysis
Record last updated: May 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before eade522d3e6ac3f3bfb51bfa5b5b4b32bd0b846f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ac7739b78ded519e1d9919a814da3b34120bec8c; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 163d04897e57633c5d2e69734e4e4b22bb63f50d; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a488001a8197da4f9c413eec8f6acbff71c60145; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 36c28b028efba0f42218d41fed12c47ce217c1f1; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 builds before 1a42cfced8900d33d032c7ec338484855b61b8cc; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9e7021d2aeae57c323a6f722ed7915686cdcc123	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.12.1 before 5.10.252; from 5.11 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4; 2.6.12; 2.6.12; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/eade522d3e6ac3f3bfb51bfa5b5b4b32bd0b846f	patch
https://git.kernel.org/stable/c/ac7739b78ded519e1d9919a814da3b34120bec8c	patch
https://git.kernel.org/stable/c/163d04897e57633c5d2e69734e4e4b22bb63f50d	patch
https://git.kernel.org/stable/c/a488001a8197da4f9c413eec8f6acbff71c60145	patch
https://git.kernel.org/stable/c/36c28b028efba0f42218d41fed12c47ce217c1f1	patch
https://git.kernel.org/stable/c/1a42cfced8900d33d032c7ec338484855b61b8cc	patch
https://git.kernel.org/stable/c/9e7021d2aeae57c323a6f722ed7915686cdcc123	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.