CVE-2026-89739

A flaw was found in the Linux kernel's USB dwc3 gadget driver. A race condition exists where a delayed operation might try to access memory that has already been freed. This can lead to a use-after-free vulnerability, which a local attacker could potentially exploit to cause a system crash denial...

CVE-2026-43170

A flaw was found in the Linux kernel's USB DWC3 gadget driver. This vulnerability occurs when the dwc3gadgetvbusdraw function is called from an atomic context, which then invokes power management integrated circuit PMIC APIs that may cause the system to sleep. An attacker could exploit this...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003649)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003649 advisory. In the Linux kernel before 4.16.4, a double-locking error in drivers/usb/dwc3/gadget.c may potentially cause a deadlock with fhid. Tenable has extracted the precedin...

PT-2021-28664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description A potential security issue exists due to the improper freeing of gadget structures in the USB dwc3 gadget driver. The actual impact and attack plausibility have not yet been proven...

PT-2021-24670

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.5 Description A potential security issue exists due to the improper freeing of gadget structures in the USB dwc3 gadget driver. The actual impact and attack plausibility have not yet been proven...