CVE-2026-90030

A flaw was found in the Linux kernel's DWC3 USB controller driver. When the forceRM bit is incorrectly set during an EndTransfer command, a transfer may remain active even after completion. A subsequent StartTransfer on the same endpoint can then trigger writes to an unmapped memory buffer, leadi...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the usb dwc3 driver not clearing the forceRM bit when issuing the EndTransfer command. As a result, aborted transfers may remain active, potentially triggering an SMMU failure...