CVE-2026-46167 usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

🗓️ 28 May 2026 09:36:22Reported by LinuxType

Fixed uninitialized heap leak in usb usblp LPGETSTATUS by freeing status buffer at probe time.

Reporter	Title	Published	Views	Family All 206
ATTACKERKB	CVE-2026-46167	28 May 202609:36	–	attackerkb
CBLMariner	CVE-2026-46167 affecting package kernel for versions less than 6.6.141.1-1	22 Jun 202621:21	–	cbl_mariner
CNNVD	Linux kernel 安全漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-46167	28 May 202609:36	–	cve
Debian CVE	CVE-2026-46167	28 May 202609:36	–	debiancve
EUVD	EUVD-2026-32794	28 May 202609:36	–	euvd
Microsoft CVE	usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl	29 May 202608:07	–	mscve
NVD	CVE-2026-46167	28 May 202610:16	–	nvd
OSV	BELL-CVE-2026-46167	29 May 202606:09	–	osv
OSV	DEBIAN-CVE-2026-46167	28 May 202610:16	–	osv

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/class/usblp.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "0f7c41314ebf17049917a452684db371babf711a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "cf24991619be317e2769310b4a367bf4a04b82bc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "087d97342c100138ea7d75a50977c9c2319f957b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "d06d937b0a4cdb8867f04275c8100a8b943da31a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "a502b997668401a6821501fc98b7f9220f9b6ff2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "762a6ccf391db0d629e590a803a3a2231e17dd3f",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "6b0e7438e31c74b01514d31ff35c1e688c4baaba",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "b38e53cbfb9d84732e5984fbd73e128d592415c5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/class/usblp.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.140",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.88",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.30",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.7",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/d06d937b0a4cdb8867f04275c8100a8b943da31a
git	www.git.kernel.org/stable/c/0f7c41314ebf17049917a452684db371babf711a
git	www.git.kernel.org/stable/c/a502b997668401a6821501fc98b7f9220f9b6ff2
git	www.git.kernel.org/stable/c/cf24991619be317e2769310b4a367bf4a04b82bc
git	www.git.kernel.org/stable/c/087d97342c100138ea7d75a50977c9c2319f957b
git	www.git.kernel.org/stable/c/762a6ccf391db0d629e590a803a3a2231e17dd3f
git	www.git.kernel.org/stable/c/b38e53cbfb9d84732e5984fbd73e128d592415c5
git	www.git.kernel.org/stable/c/6b0e7438e31c74b01514d31ff35c1e688c4baaba

14 Jun 2026 17:59Current

EPSS0.00128