usb device threat

  1. CVE-2026-31623: Linux CDC Phonet skb frags Overflow Fix and USB Trust Lesson

    CVE-2026-31623 is a small Linux kernel fix with an outsized lesson: obscure device drivers still sit on critical trust boundaries. The flaw affects the cdc-phonet USB networking path, where a malicious device pretending to be a CDC Phonet modem could push the receive path past the allowed skb...