CVE-2026-64233 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind

🗓️ 24 Jul 2026 15:27:39Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Fix race in usb gadget UVC by holding options lock from XU fixups through final descriptor copy to prevent use-after-free during bind.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-64233	24 Jul 202615:27	–	attackerkb
CVE	CVE-2026-64233	24 Jul 202615:27	–	cve
Cvelist	CVE-2026-64233 usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind	24 Jul 202615:27	–	cvelist
Debian CVE	CVE-2026-64233	24 Jul 202615:27	–	debiancve
EUVD	EUVD-2026-48642	24 Jul 202615:27	–	euvd
NVD	CVE-2026-64233	24 Jul 202616:16	–	nvd
OSV	DEBIAN-CVE-2026-64233	24 Jul 202616:16	–	osv
Positive Technologies	PT-2026-64348	24 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64233	25 Jul 202600:14	–	susecve

Source	Link
git	www.git.kernel.org/stable/c/2c9e0905ef7e69f7b814cd709613f6b3b5b98805
git	www.git.kernel.org/stable/c/5f1b9cff88982e2a2053d8b1fd983f7ccb9f03cc
git	www.git.kernel.org/stable/c/68aa70648b625fa684bc0b71bbfd905f4943ca20
git	www.git.kernel.org/stable/c/caec0145e5974e85fe5192fc6a6f5aa1a98f82a6
git	www.git.kernel.org/stable/c/e15c414092b3c24610cc771e481a723b0f645eca
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64233.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-64233
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

27 Jul 2026 04:03Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00157