CVE-2026-98762

A flaw was found in the Linux kernel's USB DWC2 driver. A race condition during host controller teardown or initialization failure allows the wakeup timer to execute after host resources have been released. A local user could exploit this use-after-free vulnerability to cause a Denial of Service...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053311)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053311 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency In...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100129 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference urb after calling...

CVE-2023-52855

The Linux kernel contains a vulnerability in the usb: dwc2 driver caused by a concurrency issue. Specifically, in _dwc2_hcd_urb_enqueue(), the statement urb->hcpriv = NULL is executed without holding the hsotg->lock spinlock. If _dwc2_hcd_urb_dequeue() is executed concurrently, the NULL che...