CVE-2026-63905

CVE-2026-63905 concerns the Linux kernel’s usbip vudc path, resolving a use-after-free in vudc_remove caused by a race with a timer. The issue arises because vudc_probe() binds an embedded timer to vudc->tr_timer.timer, and usbip_sockfd_store() can start the timer, while vudc_remove() may free...