{
  "cveId": "CVE-2026-23334",
  "url": "https://patchblox.com/security/cve/CVE-2026-23334",
  "summary": "CVE-2026-23334 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-23334, released March 25, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "can: usb: f81604: handle short interrupt urb messages properly",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  can: usb: f81604: handle short interrupt urb messages properly  If an interrupt urb is received that is not the correct length, properly detect it and don\u0027t attempt to treat the data as valid.",
  "published": "2026-03-25T11:16:30Z",
  "severity": "Moderate",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00127,
  "epssPercentile": 0.02369,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-23334",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.85-1",
      "fix": "DEBIAN-CVE-2026-23334",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23334",
      "released": "2026-03-25T11:16:30Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.19.8-1",
      "fix": "DEBIAN-CVE-2026-23334",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23334",
      "released": "2026-03-25T11:16:30Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}