CVE-2026-80826 USB: c67x00: fix use-after-free in c67x00_add_iso_urb()

In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00addisourb When TD creation fails for the last packet of an isochronous URB, c67x00addisourb gives the URB back before updating the endpoint scheduling state. c67x00givebackurb frees the UR...

CVE-2026-80826

CVE-2026-80826 is a use-after-free in the Linux kernel's c67x00 USB driver , specifically in c67x00_add_iso_urb(). When TD creation fails for the last packet of an isochronous URB, the driver gives the URB back before updating the endpoint scheduling state. Since c67x00_giveback_urb() frees the U...