CVE-2026-80854

CVE-2026-80854 affects the Linux kernel USB gadget f_tcm (TCM backend) driver. The root cause is a race condition : usbg_port_unlink() decrements tpg_port_count in the fabric_pre_unlink() callback, before core_dev_del_lun() finishes draining active se_lun references. If the last-LUN unlink overla...

CVE-2026-80854 usb: gadget: f_tcm: keep port count until LUN teardown completes

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: keep port count until LUN teardown completes tcmusbgdropnexus permits session removal once tpgportcount reaches zero. However, usbgportunlink currently decrements that count from the fabricpreunlink callback,...

EUVD-2026-71304

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ftcm: keep port count until LUN teardown completes tcmusbgdropnexus permits session removal once tpgportcount reaches zero. However, usbgportunlink currently decrements that count from the fabricpreunlink callback,...

PT-2026-85732

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f tcm: keep port count until LUN teardown completes tcm usbg drop nexus permits session removal once tpg port count reaches zero. However, usbg port unlink currently decrements that count from the fabric pre unlink...