The Linux kernel driver for the Digi AccelePort USB device contained a logic flaw that prevented the driver from resubmitting a read request when the port was closed while the driver was throttled. As a result, the USB device stopped delivering data entirely until the device was physically reconnected or the driver was rebound, causing a silent loss of serial communication. This defect does not grant arbitrary code execution or privilege escalation; it solely interrupts the normal operation of the serial connection, effectively denying service to any application relying on that communication channel.

The vulnerability affects all Linux kernel releases that include the digi_acceleport driver before the patch that corrects the throttling bug. The affected CPE strings indicate any kernel based on Linux, including older 2.6.12 releases and newer 7.2 releases. There is no specific version range given, so any kernel that still contains the unpatched driver code is considered vulnerable.

The CVSS score of 5.5 reflects a medium severity, indicating a denial of service that does not compromise confidentiality or integrity. The EPSS score is reported as less than 1 % and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of exploitation. The bug is local in scope; an attacker would need to cause the USB serial port to be closed while it is throttled, for example by sending a close command or manipulating the device state. In typical deployments that do not close the port under throttle, the risk is minimal. However, any system using the digi_acceleport driver should apply the official kernel update that addresses the issue to eliminate the potential for a denial‑of‑service event.