CVE-2026-23312: net: usb: kaweth: validate USB endpoints

Q: Who is exposed to this issue?

Systems running the Linux kernel with the kaweth USB network driver are exposed when they probe a malicious USB device. Exploitation requires local access and low privileges.

Q: What does an attacker need to do to trigger the flaw?

An attacker needs to present a malicious USB device whose endpoint layout does not match what the kaweth driver expects. The driver can later crash when it accesses the missing or incorrect endpoints.

Q: What is the impact of successful exploitation?

Successful exploitation can cause a denial of service through a kernel crash. The provided severity vector indicates no confidentiality or integrity impact.

Q: What should be done if patching cannot happen immediately?

Limit exposure to untrusted USB devices, particularly devices that could be handled by the kaweth driver. A patch is available.

Published Mar 25, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

net: usb: kaweth: validate USB endpoints

The kaweth driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

Affected Software

15 affected componentsFixes available

Linux Linux kernel (kaweth)

Microsoft azl3 kernel 6.6.126.1-1

Patch available

Linux Linux kernel>=2.6.12.1<5.10.253

Linux Linux kernel>=5.11<5.15.203

Linux Linux kernel>=5.16<6.1.167

Linux Linux kernel>=6.2<6.6.130

Linux Linux kernel>=6.7<6.12.77

Linux Linux kernel>=6.13<6.18.17

Linux Linux kernel>=6.19<6.19.7

Linux Linux kernel=2.6.12

Linux Linux kernel=2.6.12-rc2

Linux Linux kernel=2.6.12-rc3

Linux Linux kernel=2.6.12-rc4

Linux Linux kernel=2.6.12-rc5

Linux Linux kernel=7.0-rc1

Remediation

Event History

Mar 25, 2026

CVE Published

via MITRE·10:27 AM

Data Sourced

via MITRE·10:27 AM

Description

Data Sourced

via NVD·11:16 AM

RemedyDescriptionSeverityAffected Software

Mar 26, 2026

Data Sourced

via Microsoft·08:02 AM

DescriptionSeverityWeaknessAffected Software

Updated

via Microsoft·08:02 AM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this issue?

Systems running the Linux kernel with the kaweth USB network driver are exposed when they probe a malicious USB device. Exploitation requires local access and low privileges.

What does an attacker need to do to trigger the flaw?

An attacker needs to present a malicious USB device whose endpoint layout does not match what the kaweth driver expects. The driver can later crash when it accesses the missing or incorrect endpoints.

What is the impact of successful exploitation?

Successful exploitation can cause a denial of service through a kernel crash. The provided severity vector indicates no confidentiality or integrity impact.

What should be done if patching cannot happen immediately?

Limit exposure to untrusted USB devices, particularly devices that could be handled by the kaweth driver. A patch is available.

CVE-2026-23312: net: usb: kaweth: validate USB endpoints

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to trigger the flaw?

What is the impact of successful exploitation?

What should be done if patching cannot happen immediately?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to do to trigger the flaw?

What is the impact of successful exploitation?

What should be done if patching cannot happen immediately?