CVE-2026-64343

The CVE-2026-64343 issue is in the Linux kernel USB driver stack (ldusb). The vulnerability arises from a use-after-free race on disconnect where mutex_unlock() can access the mutex structure after the lock is released, risking lifetime management of objects. The documented fix introduces a kref-...

PT-2026-64564

In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect race mutex unlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12 Use a...