The Linux kernel vendor driver for the Digi AccelePort USB device had a logic flaw wherein, if the device port was closed while it was throttled, the read request (URB) was never resubmitted. Subsequent data from the device would not be received until the physical device was disconnected and reconnected or the driver was rebound. The failure manifests as a silent loss of all serial data, effectively denying service to applications that rely on the USB serial connection. The defect does not allow arbitrary code execution or privilege escalation; it is a functional bug that creates a denial of service under specific conditions.

The vulnerability affects the Linux kernel vendor kernel and the included digi_acceleport driver. No specific kernel version range is listed in the data, but all kernel releases prior to the patch that contains the fix are considered affected.

The EPSS score is reported as less than 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of exploitation. The bug appears local in scope, requiring the attacker to influence the device port state (e.g., by sending a close command while the driver is throttling). For typical deployments that do not forcibly close the port under throttle, the risk is minimal. Nevertheless, any system using the digi_acceleport driver should use the official kernel update that addresses the issue to eliminate the potential for a denial‑of‑service event.