PT-2026-91330

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usb device in usbdev release usbdev release drops its reference to the struct usb device before draining the list of completed async URBs, but that drain path reads back through the same object:...