CVE-2026-64242

In the Linux kernel, the net2280 USB gadget driver fix eliminates a double-free in the probe error path. The gadget_init registers gadget_release() as the release callback; net2280_remove() tears down the device and drops the gadget reference with usb_put_gadget(). A subsequent kfree(dev) could f...

EUVD-2026-48651

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usbinitializegadget installs gadgetrelease as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadgetrelease...

PT-2026-64357

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb initialize gadget installs gadget release as the release callback for the embedded gadget device. The struct net2280 instance is therefore released through gadget...