CVE-2026-64335: USB: serial: digi_acceleport: fix broken rx after throttle

From: Greg Kroah-Hartman <[email protected]>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

USB: serial: digi_acceleport: fix broken rx after throttle

If the port is closed while throttled, the read urb is never resubmitted
and the port will not receive any further data until the device is
reconnected (or the driver is rebound).

Clear the throttle flags and submit the urb if needed when opening the
port.

The Linux kernel CVE team has assigned CVE-2026-64335 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.10.261 with commit 4f3f6f44db71e469933a7c36c5d57d937ba0a21b
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 5.15.212 with commit d5d2660caef78d4c996d34d123574c8e86f5b5ac
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.1.178 with commit 61954033326fc7e637ed2aeeb4b52021e0ee4657
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.6.145 with commit 8d50a910194f66566a5eb252b33283855c8d5203
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.12.96 with commit abacd67e6f689c62d8a13e3da25f4272bc9ad4af
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 6.18.39 with commit eab394781e9321c0c7e97a24fd092387cb262f40
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 7.1.4 with commit 92fa3e1a49848509ea3f7995751963fc65095998
	Issue introduced in 2.6.12 with commit 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and fixed in 7.2-rc3 with commit 83a3dfc018943b05b6daf3a6f891833e1aabfa1f

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-64335
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/usb/serial/digi_acceleport.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/4f3f6f44db71e469933a7c36c5d57d937ba0a21b
	https://git.kernel.org/stable/c/d5d2660caef78d4c996d34d123574c8e86f5b5ac
	https://git.kernel.org/stable/c/61954033326fc7e637ed2aeeb4b52021e0ee4657
	https://git.kernel.org/stable/c/8d50a910194f66566a5eb252b33283855c8d5203
	https://git.kernel.org/stable/c/abacd67e6f689c62d8a13e3da25f4272bc9ad4af
	https://git.kernel.org/stable/c/eab394781e9321c0c7e97a24fd092387cb262f40
	https://git.kernel.org/stable/c/92fa3e1a49848509ea3f7995751963fc65095998
	https://git.kernel.org/stable/c/83a3dfc018943b05b6daf3a6f891833e1aabfa1f