CVE-2026-89733

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq is a...

CVE-2026-89733

CVE-2026-89733 is a Use-After-Free (UAF) vulnerability in the Linux kernel's USB gadget UVC subsystem. In the error path of uvc_function_bind(), the function calls usb_ep_free_request() (which uses uvc->control_req) and kfree() (on uvc->control_buf) but does not set either pointer to NULL, ...

EUVD-2026-76645

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix dangling pointers in uvcfunctionbind and uvcfunctionunbind In uvcfunctionbind error path, we use usbepfreerequest which uses uvc-controlreq but does not set it to NULL afterwards. Thus, uvc-controlreq is a...