Riskcovery

CVE-2026-23347

can: usb: f81604: correctly anchor the urb in the read bulk callback

State
Published
Severity
Not scored
Published
Mar 25, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

can: usb: f81604: correctly anchor the urb in the read bulk callback

When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 88da17436973e463bed59bea79771fb03a21555e to before 54ee74307165b348b2fddcd7942eb48fb4ee1237Affected
  • 88da17436973e463bed59bea79771fb03a21555e to before c001214e12202338425d6dda5d2a1919d674282dAffected
  • 88da17436973e463bed59bea79771fb03a21555e to before f6d80b104f904a6da922907394eec66d3e2ffc57Affected
  • 88da17436973e463bed59bea79771fb03a21555e to before 7724645c4792914cd07f36718816c5369cc57970Affected
  • 88da17436973e463bed59bea79771fb03a21555e to before 952caa5da10bed22be09612433964f6877ba0ddeAffected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.77 through 6.12.*Not affected
  • 6.18.17 through 6.18.*Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.