A write buffer corruption vulnerability in the Linux kernel USB serial Digi AccelePort driver allows local attackers with low privileges to achieve high system impact.

This is a memory corruption vulnerability within the digi_write_inb_command function of the USB serial driver, requiring low local privileges and no user interaction to trigger.

A successful exploit of this vulnerability can lead to severe system compromise, including unauthorized data access, integrity violations, and potential denial of service via system crashes or arbitrary code execution within the kernel context. While the CVSS score is 7.8, representing a high severity rating, the local access requirement mitigates remote exposure, though insider threats or compromised local accounts remain significant risks.

Immediate Action: Update the Linux kernel to fixed versions such as 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unusual USB serial driver error messages indicating buffer corruption attempts.

Compensating Controls: Restrict local shell access and limit user permissions to minimize the number of accounts capable of interacting with USB serial device nodes.

Public Exploit Available: No — false / unknown

Administrators must prioritize updating affected Linux kernel packages to the patched versions across all deployed systems. Because local privilege escalation and kernel corruption can lead to total system takeover, applying the official vendor patch is essential to eliminate the underlying logic flaw.