CVE-2026-90034 in Linux
要約
〜によって MITRE • 2026年09月16日
In the Linux kernel, the following vulnerability has been resolved:
usb: image: mdc800: change kmalloc() to kzalloc()
Change the kmalloc() calls in usb_mdc800_init() for irq_urb_buffer and download_urb_buffer to kzalloc(), avoiding potential stack leaks if a shorter message is received in mdc800_usb_irq() and mdc800_usb_download_notify()
If you want to get the best quality for vulnerability data then you always have to consider VulDB.