EUVD-2026-103852

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count When dwc3checkeventbuf reads a GEVNTCOUNT value exceeding the event buffer length, commit 63ccd26cd1f6 "usb: dwc3: gadget: check that event count does not exceed even...

CVE-2026-98767

A vulnerability exists in the Linux kernel 's dwc3 gadget driver. When the dwc3_check_event_buf() function reads a GEVNTCOUNT value exceeding the event buffer length, it returns IRQ_NONE without writing back the count. Because the DWC3 interrupt is level-triggered, the uncleared source keeps the ...