CVE-2026-64334: USB: serial: digi_acceleport: fix hard lockup on disconnect

From: Greg Kroah-Hartman <[email protected]>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix hard lockup on disconnect

If submitting the OOB write urb fails persistently (e.g if the device is
being disconnected) the driver would loop indefinitely with interrupts
disabled.

Check for urb submission errors when sending OOB commands to avoid
hanging if, for example, open(), set_termios() or close() races with a
physical disconnect.

This is issue was flagged by Sashiko when reviewing an unrelated change
to the driver.

The Linux kernel CVE team has assigned CVE-2026-64334 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.10.261 with commit 6e51147c2744d15730084dc89cc99180d3de4184
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.15.212 with commit 6a8592ace932081ea11aea41c460a1ca0f6344a4
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.1.178 with commit 5a82d842e8c35227d7227f19e5e654df1451782c
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.6.145 with commit bcfeae431db9986c2b313e6a760f2ac8df61e138
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.12.96 with commit 2067b3838da6e4af03bae3630414193188d754b2
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.18.39 with commit 2b7dc482f859f2d027db07ff0efc1c5df5b3451a
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 7.1.4 with commit 79bc131df0e50f8f663c1fdbbe952aaf193a8d39
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 7.2-rc3 with commit 5c1ea24b53bf3bfb859f0a05573997487975da23

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-64334
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/usb/serial/digi_acceleport.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/6e51147c2744d15730084dc89cc99180d3de4184
	https://git.kernel.org/stable/c/6a8592ace932081ea11aea41c460a1ca0f6344a4
	https://git.kernel.org/stable/c/5a82d842e8c35227d7227f19e5e654df1451782c
	https://git.kernel.org/stable/c/bcfeae431db9986c2b313e6a760f2ac8df61e138
	https://git.kernel.org/stable/c/2067b3838da6e4af03bae3630414193188d754b2
	https://git.kernel.org/stable/c/2b7dc482f859f2d027db07ff0efc1c5df5b3451a
	https://git.kernel.org/stable/c/79bc131df0e50f8f663c1fdbbe952aaf193a8d39
	https://git.kernel.org/stable/c/5c1ea24b53bf3bfb859f0a05573997487975da23