PT-2026-43790 · Linux+1 · Linux Kernel+1

CVE-2026-45923 · Published 2026-05-27 · Updated 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The catc probe() function fills three USB Request Blocks (URBs) with hardcoded endpoint pipes without verifying the endpoint descriptors. Specifically, it uses usb sndbulkpipe(usbdev, 1) and usb rcvbulkpipe(usbdev, 1) for transmission and reception, and usb rcvintpipe(usbdev, 2) for interrupt status. A malformed USB device can present these endpoints with transfer types that differ from the driver's assumptions, potentially leading to unexpected behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-45923

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8492-1

USN-8492-2

USN-8492-3

USN-8492-4

USN-8492-5

USN-8497-1

USN-8498-1

USN-8499-1

USN-8606-1

USN-8607-1

USN-8609-1

USN-8619-1

Affected Products

Linuxmint

Linux Kernel

References · 2530

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45923.json · Exploit
• https://ubuntu.com/security/CVE-2026-31730 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31720 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45938 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-63860 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45991 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68736 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23343 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53304 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31725 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46018 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23339 · Vendor Advisory