CVE-2026-64340

The CVE-2026-64340 entry concerns the Linux kernel USB legousbtower driver. A use-after-free can occur because mutex_unlock() may access the mutex object after the lock is released, which can mismanage object lifetimes during disconnect races. The documented fix is to release the driver data usin...

PT-2026-64561

In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconnect race mutex unlock may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly unlike spinlocks and refcounts. 12...