CVE-2026-80824

CVE-2026-80824 is a use-after-free in the Linux kernel's usbfs subsystem. In usbdev_release(), the reference to struct usb_device is dropped before draining completed async URBs; the drain path then dereferences the already-freed device via bus_to_hcd(ps->dev->bus) in dec_usb_memory_use_cou...