7.8

CVE-2026-64342

USB: iowarrior: fix use-after-free on disconnect

In the Linux kernel, the following vulnerability has been resolved:

USB: iowarrior: fix use-after-free on disconnect

Submitted write URBs are not stopped on close() and therefore need to be
stopped unconditionally on disconnect() to avoid use-after-free in the
completion handler.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.21.1 < 5.10.261
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.212
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.178
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.145
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.96
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.39
Linux ≫ Linux Kernel Version >= 6.19 < 7.1.4
Linux ≫ Linux Kernel Version 2.6.21 Update -
Linux ≫ Linux Kernel Version 2.6.21 Update rc2
Linux ≫ Linux Kernel Version 2.6.21 Update rc3
Linux ≫ Linux Kernel Version 2.6.21 Update rc4
Linux ≫ Linux Kernel Version 2.6.21 Update rc5
Linux ≫ Linux Kernel Version 2.6.21 Update rc6
Linux ≫ Linux Kernel Version 2.6.21 Update rc7
Linux ≫ Linux Kernel Version 7.2 Update rc1
Linux ≫ Linux Kernel Version 7.2 Update rc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.075
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/d058d377291567b72aea33b017215cbfb383b0ad
Patch
https://git.kernel.org/stable/c/a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595
Patch
https://git.kernel.org/stable/c/97ad9337127be04ca0b027c2b01e69302353f404
Patch
https://git.kernel.org/stable/c/164398601a7f160bc3df1efa454f983302cef03f
Patch
https://git.kernel.org/stable/c/f328b0e9a0dbd162f5db1b83026b689f2fea2241
Patch
https://git.kernel.org/stable/c/b748f97aff339e7f08dca9cf38a05b980fb66fea
Patch
https://git.kernel.org/stable/c/e4596816984efc537e7c04c1af0c639394f967f7
Patch
https://git.kernel.org/stable/c/bc0e4f16c44e50daa0b1ea729934baa3b4815dee
Patch