SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63927

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the Linux kernel's DWC2 USB driver can lead to potential memory corruption, allowing attackers to execute arbitrary code or crash the system. Organizations using affected Linux distributions should prioritize patching this vulnerability to mitigate the risk of exploitation, especially those relying on USB devices for critical operations.

CVE
CVE-2026-63927
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usb_hcd_giveback_urb() so save the urb->status ahead of time.