CVE-2026-80824

CVE-2026-80824 is a use-after-free in the Linux kernel's usbfs subsystem. In usbdev_release(), the reference to struct usb_device is dropped before draining completed async URBs; the drain path then dereferences the already-freed device via bus_to_hcd(ps->dev->bus) in dec_usb_memory_use_cou...

EUVD-2026-71274

In the Linux kernel, the following vulnerability has been resolved: usb: usbfs: fix use-after-free of usbdevice in usbdevrelease usbdevrelease drops its reference to the struct usbdevice before draining the list of completed async URBs, but that drain path reads back through the same object:...