CVE-2026-46103

Analyzed Analyzed - Analysis Complete

UCAN Control Message Buffer Lifetime Issue in Linux Kernel

Publication date: 2026-05-27

Last updated on: 2026-06-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the control message buffer lifetime so that it is released on driver unbind.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-25

Generated

2026-07-07

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-46103

EUVD

EUVD-2026-32486

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.7 (inc) to 6.12.86 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.175 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.140 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.27 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.4 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.210 (exc)
linux	linux_kernel	From 4.19 (inc) to 5.10.259 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability relates to the Linux kernel's USB drivers, specifically the 'can: ucan' component. The issue was that device-managed resources were tied to the parent USB device instead of the USB interface. This caused problems such as memory leaks when drivers were unbound without the physical disconnection of their devices, for example during probe deferral or configuration changes.

The fix involved correcting the lifetime management of the control message buffer so that it is properly released when the driver is unbound, preventing resource leaks.

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel when USB drivers are unbound without the device being physically disconnected. Over time, such leaks could degrade system performance or stability, potentially causing resource exhaustion or unexpected behavior in systems relying on USB devices.

Hi! I’m here to help you understand CVE-2026-46103. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70