CVE-2026-64350

Analyzed Analyzed - Analysis Complete

Use-After-Free in Linux Kernel USB CDNSP Driver

Publication date: 2026-07-25

Last updated on: 2026-09-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated. Free the stream context array before falling through to the stream_rings cleanup path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-25

Last Modified

2026-09-03

Generated

2026-09-23

AI Q&A

2026-07-25

EPSS Evaluated

2026-09-22

NVD

CVE-2026-64350

EUVD

EUVD-2026-48894

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 5.16 (inc) to 6.1.178 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.145 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.96 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.39 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.1.4 (exc)
linux	linux_kernel	7.2
linux	linux_kernel	7.2
linux	linux_kernel	From 5.12 (inc) to 5.15.212 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This is a memory leak vulnerability in the Linux kernel's USB subsystem, specifically in the cdnsp driver. The function cdnsp_alloc_stream_info() allocates memory for stream context arrays but fails to free this memory if subsequent operations like stream ring allocation or mapping updates fail. This leaves allocated memory unreleased, potentially causing resource exhaustion over time.

Detection Guidance

This vulnerability is specific to the Linux kernel's USB CDNSP driver and may not have direct network detection methods. Check kernel logs for errors related to usb: cdnsp or stream context allocation failures using commands like dmesg | grep cdnsp or journalctl -k | grep cdnsp.

Impact Analysis

The impact is primarily on system stability and resource usage. If exploited repeatedly, it could lead to memory exhaustion, causing system slowdowns, crashes, or denial of service. It may also affect USB device functionality if the driver becomes unstable due to memory leaks.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a memory leak issue in the Linux kernel's USB subsystem. It may indirectly impact compliance if the leak causes system instability or crashes, potentially affecting data integrity or availability.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for related errors and ensure your system is running a patched kernel version.

Hi! I’m here to help you understand CVE-2026-64350. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70