CVE-2026-64240
Received Received - Intake

USB Control URB Setup Packet Vulnerability in Linux Kernel

Publication date: 2026-07-24

Last updated on: 2026-07-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f ("media: rc: igorplugusb: heed coherency rules") changed the control request storage from an embedded struct to an allocated pointer so it can obey DMA coherency rules. However, the driver still passes &ir->request to usb_fill_control_urb(). That points the URB setup packet at the pointer field itself rather than at the allocated struct usb_ctrlrequest. USB core then interprets pointer bytes as the setup packet. This can produce an invalid bRequestType and trigger the control direction warning reported by syzbot: usb 2-1: BOGUS control dir, pipe 80003580 doesn't match bRequestType 0 Pass ir->request itself as the setup packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-24
Last Modified
2026-07-24
Generated
2026-07-24
AI Q&A
2026-07-24
EPSS Evaluated
N/A
NVD
CVE-2026-64240
EUVD
EUVD-2026-48649

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the igorplugusb USB remote control driver. It involves incorrect handling of a USB control request setup packet. The driver changed how it stores control requests for DMA coherency but still passed the wrong memory address to a USB function, causing the USB core to misinterpret control data and trigger errors.

Detection Guidance

This vulnerability is specific to the Linux kernel's media/rc/igorplugusb driver and does not have network-based detection methods. It can be detected by checking the kernel version and verifying if the affected driver is loaded. Use commands like 'uname -r' to check the kernel version and 'lsmod | grep igorplugusb' to see if the driver is loaded.

Impact Analysis

This vulnerability could cause USB devices using the igorplugusb driver to malfunction or fail. It may result in error messages, device disconnections, or system instability when using affected USB remote control devices.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a version that includes the fix. Check your distribution's updates or apply the patch manually if available. If the driver is not critical, consider unloading it with 'modprobe -r igorplugusb' until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64240. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart