CVE-2026-64585

The CVE affects the Linux kernel subsystems for CAN over USB, specifically can: esd_usb. The issue arises because esd_usb_disconnect() frees each CAN netdev with free_candev() inside a per-netdev loop and then calls unlink_all_urbs(dev), leaving netdev pointers (dev->nets[i]) to freed memory w...