5.5

CVE-2026-64338

USB: misc: uss720: unregister parport on probe failure

In the Linux kernel, the following vulnerability has been resolved:

USB: misc: uss720: unregister parport on probe failure

uss720_probe() registers a parport before reading the 1284 register used
to detect unsupported Belkin F5U002 adapters. If get_1284_register()
fails, the error path drops the driver private data and the USB device
reference, but leaves the parport device registered.

Leaving the port registered is more than a private allocation leak:
parport_register_port() has already reserved a parport number and
registered the parport bus device, while pp->private_data still points at
the private data that the common error path is about to release.

Undo the pre-announce registration in the get_1284_register() failure
branch before jumping to the common private-data cleanup path. Clear
priv->pp first, matching the disconnect path and avoiding a stale pointer
in the private data.

This issue was identified during our ongoing static-analysis research while
reviewing kernel code.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.19.317 < 4.20
Linux ≫ Linux Kernel Version >= 5.4.279 < 5.5
Linux ≫ Linux Kernel Version >= 5.10.221 < 5.10.261
Linux ≫ Linux Kernel Version >= 5.15.162 < 5.15.212
Linux ≫ Linux Kernel Version >= 6.1.96 < 6.1.178
Linux ≫ Linux Kernel Version >= 6.6.36 < 6.6.145
Linux ≫ Linux Kernel Version >= 6.9.7 < 6.12.96
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.39
Linux ≫ Linux Kernel Version >= 6.19 < 7.1.4
Linux ≫ Linux Kernel Version 7.2 Update rc1
Linux ≫ Linux Kernel Version 7.2 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/6bbb98bec71b577fda4f4b48f7aea5874b04a576
Patch
https://git.kernel.org/stable/c/93563243377f8e9b46cc94d9c4f06533dd31b141
Patch
https://git.kernel.org/stable/c/1712fd71a5aaf81e47c747f180535fa963ad7830
Patch
https://git.kernel.org/stable/c/0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea
Patch
https://git.kernel.org/stable/c/5e62d7857fd51b908b8371062ee839739a086bbe
Patch
https://git.kernel.org/stable/c/729b68a5bad71220ae0914c8bdab9488ad5be6c8
Patch
https://git.kernel.org/stable/c/48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e
Patch
https://git.kernel.org/stable/c/b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3
Patch