CVE-2026-90029

CVE-2026-90029 is a use-after-free vulnerability in the Linux kernel 's USB storage realtek_cr driver, triggered on device disconnect . The root cause is that realtek_cr_destructor() calls timer_delete() before the chip containing the timer is freed, allowing the timer callback to rearm itself ag...

EUVD-2026-80637

In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtekcr: fix use-after-free on disconnect realtekcrdestructor calls timerdelete before the chip containing the timer is freed. The timer callback may still be running and can rearm itself, resulting in a...