CVE-2026-98767

A flaw was found in the Linux kernel's DWC3 USB gadget driver. When an invalid event buffer count exceeding the buffer size is encountered, the driver fails to acknowledge and clear the hardware interrupt source before returning. This leaves the interrupt line continuously asserted, triggering an...

CVE-2026-98769

A flaw was found in the Linux kernel's Universal Serial Bus USB audio gadget driver. A connected USB host can send a specially crafted audio control request with an invalid command index, causing an out-of-bounds heap memory read and write. This flaw primarily allows an attacker to cause a Denial...

CVE-2026-98757

A flaw was found in the Linux kernel's Cadence USB3 gadget driver. This vulnerability can lead to a Denial of Service DoS through a system crash or potentially allow privilege escalation. During device teardown, the driver releases memory without waiting for pending background work tasks to finis...

CVE-2026-93141

A flaw was found in the r8a66597 USB gadget driver in the Linux kernel. This vulnerability occurs in the r8a66597probe function during an error handling path, where the ep0req object is erroneously freed twice if usbaddgadgetudc fails. This double free can lead to memory corruption, potentially...

CVE-2026-93122

A flaw was found in the Linux kernel's USB Audio Class UAC gadget driver. This vulnerability occurs when processing a list of sampling rates, where the driver fails to properly validate the length of the input list. An attacker could provide an overly long list, causing the system to write data...

CVE-2026-93118

A flaw was found in the Linux kernel's USB gadget driver for Aspeed UDC. During the device initialization process, a failure to allocate a Direct Memory Access DMA buffer is not properly handled. This can lead to the driver attempting to use an invalid memory address, potentially causing a system...

UBUNTU-CVE-2026-98765

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

SUSE CVE-2026-98765

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

DEBIAN-CVE-2026-98765

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

CVE-2026-98765

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

EUVD-2026-103850

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

CVE-2026-98765

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage counter drops to 0 with the private lock not held. This counter is...

PT-2026-116984

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronize irq by waiting until its private callback usage counter drops to 0 with the private lock not held. This counter is...

Linux Distros Unpatched Vulnerability : CVE-2026-98765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronizeirq by waiting until its private callbackusage...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the dummy-hcd driver, which does not count request completion callbacks in the callbackusage counter when simulating synchronizeirq. As a result, the unbind routine of the gadget driver may execute before all requests ha...

ROS-20261009-73-0482

The vulnerability of the setlinkstate function in the drivers/usb/gadget/udc/dummyhcd.c file of the Linux USB gadget driver module is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service failure...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: nfc: pn533: Wait for outurb’s completion in pn533usbsendframe A use-after-free issue occurred in hcd when inurb sent from pn533usbsendframe was completed earlier than outurb. The callback in pn533sendComplete frees the skb dat...

Linux kernel USB gadget driver DoS

The vulnerability in the setlinkstate function within drivers/usb/gadget/udc/dummyhcd.c of the Linux kernel USB gadget driver is related to improper deallocation or release of resources. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-97482

A flaw was found in the Linux kernel's gokuudc USB gadget driver. An attacker or event triggering a USB reset interrupt before a gadget driver is bound, or after one is unbound, causes the interrupt handler to access an uninitialized driver pointer while logging the event. This flaw results in a...

ROS-20260929-73-0038

The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...