CVE-2026-90044

CVE-2026-90044 is a Use-After-Free vulnerability in the Linux kernel USB gadget f_fs (function filesystem) module, specifically in ffs_epfile_write_iter() and ffs_epfile_read_iter(). When ffs_epfile_io() fails with an error other than -EIOCBQUEUED, the io_data structure is freed, but for AIO oper...

DEBIAN-CVE-2024-36894

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix race between aiocancel and AIO request complete FFS based applications can utilize the aiocancel callback to dequeue pending USB requests submitted to the UDC. There is a scenario where the FFS application...