CVE-2026-64340

CVE-2026-64340 is a use-after-free in the Linux kernel's USB legousbtower driver caused by a race between release() and disconnect(). The root cause is that mutex_unlock() can access the mutex structure after the lock is released, making it unsafe for object lifetime management. The fix introduce...