CVE-2026-23009

A use-after-free vulnerability was found in the Linux kernel's xHCI USB host controller driver. The xhcisidebandremoveendpoint function incorrectly assumes the endpoint has a valid transfer ring and dereferences ep-ring without checking. After suspend/resume cycles where the xHCI controller loses...