CVE-2026-31607

A flaw was found in the Linux kernel's USB/IP subsystem. A malicious USB/IP server could exploit a vulnerability in the usbip_pack_ret_submit() function by sending a specially crafted RET_SUBMIT response. This response, containing an oversized number_of_packets value, could cause a heap out-of-bounds write. This issue may lead to a denial of service or potentially arbitrary code execution on the client system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the usbip kernel module from loading by blacklisting it. Create a file named /etc/modprobe.d/blacklist-usbip.conf with the following content:

blacklist usbip

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This may impact functionality that relies on USB/IP.