OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-64342

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of USB devices, specifically the iowarrior driver, where submitted write URBs are not properly stopped upon disconnection. This oversight can lead to a use-after-free condition in the completion handler, potentially allowing for memory corruption or arbitrary code execution. Organizations utilizing Linux systems with USB iowarrior devices should prioritize addressing this issue to mitigate associated risks.

CVE
CVE-2026-64342
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect Submitted write URBs are not stopped on close() and therefore need to be stopped unconditionally on disconnect() to avoid use-after-free in the completion handler.