SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63906

HIGH · CVSS 8.4 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's omap2430_probe() function, where a premature call to of_node_put() can lead to a use-after-free condition if the reference count of a node drops to zero. This flaw can potentially allow an attacker to execute arbitrary code or cause a system crash, posing a significant risk to systems utilizing the affected kernel version. Organizations using Linux systems with the omap2430 architecture should prioritize patching this vulnerability to mitigate the associated risks.

CVE
CVE-2026-63906
Severity
HIGH
CVSS
8.4
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.