CVE-2026-98757

The Linux kernel contains a use-after-free vulnerability in the cdns3 gadget driver. The issue originates in cdns3_gadget_exit(), which fails to wait for two specific works (pending_status_wq and aligned_buf_wq) queued on system_freezable_wq. Because the function proceeds to free endpoints, buffe...

CVE-2026-98757 usb: cdns3: fix use-after-free in cdns3_gadget_exit()

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix use-after-free in cdns3gadgetexit cdns3gadgetstart arms two works on systemfreezablewq: pendingstatuswq for the deferred ep0 status stage and alignedbufwq for realigned request buffers. Both handlers use the...