usb endpoint validation

USB endpoint validation is a critical security practice in Linux kernel drivers, ensuring that USB devices expose the expected endpoints before the driver binds to them. Recent vulnerabilities like CVE-2026-23365 and CVE-2026-23290 highlight the risks of trusting device-reported endpoint configurations without verification. In the kalmia and pegasus network drivers, missing endpoint checks could allow a malicious or malformed USB device to trigger a crash when the driver dereferences missing or mismatched URBs. These fixes, queued for stable kernels, demonstrate that endpoint validation is not just theoretical hardening but a real robustness issue with security implications. The tag covers kernel-level USB driver security, endpoint trust, and crash prevention.