usb endpoint validation

CVE-2026-23365 is a small-looking Linux kernel bug with a large security lesson: USB drivers must never trust the shape of a device they are binding to. In the kalmia network driver, the kernel now checks that the attached USB device exposes the expected endpoints before proceeding, because a...

CVE-2026-23290 is a reminder that kernel security problems do not always arrive as dramatic memory-corruption headlines. In this case, the Linux pegasus USB network driver is being hardened so it checks that a connected device exposes the USB endpoints the driver expects before binding to it...