CVE-2026-23347 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.

EPSS 0.02% · 4.5th percentile

Risk Scores

EPSS Score
0.02%
4.5th percentile

Affected Products

VendorProductVersions
LinuxLinux88da17436973e463bed59bea79771fb03a21555e, 88da17436973e463bed59bea79771fb03a21555e, 88da17436973e463bed59bea79771fb03a21555e
linuxlinux_kernel6.5, 6.5, 6.5

Timeline

References

…and 63 more

Open in Interactive Console →