CVE-2026-64338

USB: misc: uss720: unregister parport on probe failure

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Aug 17, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: misc: uss720: unregister parport on probe failure

uss720_probe() registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get_1284_register() fails, the error path drops the driver private data and the USB device reference, but leaves the parport device registered.

Leaving the port registered is more than a private allocation leak: parport_register_port() has already reserved a parport number and registered the parport bus device, while pp->private_data still points at the private data that the common error path is about to release.

Undo the pre-announce registration in the get_1284_register() failure branch before jumping to the common private-data cleanup path. Clear priv->pp first, matching the disconnect path and avoiding a stale pointer in the private data.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 04736c1bc32197f7d859e01a96ae80a16659931d to before 6bbb98bec71b577fda4f4b48f7aea5874b04a576Affected
  • 4eaf2331a77996bbbaf2b824d452ac8ebda7e6e7 to before 93563243377f8e9b46cc94d9c4f06533dd31b141Affected
  • 8fc246a8a456679993df565d3c9e3da28030ee43 to before 1712fd71a5aaf81e47c747f180535fa963ad7830Affected
  • 10132ccf99f49b43aeb7470df50d72344a601ad6 to before 0b3073f40cc9f95d5ff0037eb0a06f5c1725a7eaAffected
  • 3295f1b866bfbcabd625511968e8a5c541f9ab32 to before 5e62d7857fd51b908b8371062ee839739a086bbeAffected
  • 3295f1b866bfbcabd625511968e8a5c541f9ab32 to before 729b68a5bad71220ae0914c8bdab9488ad5be6c8Affected
  • 3295f1b866bfbcabd625511968e8a5c541f9ab32 to before 48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3eAffected
  • 3295f1b866bfbcabd625511968e8a5c541f9ab32 to before b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3Affected
  • 02d13616ca30014ed96302e51a5b0e17664e58bcAffected
  • dff3b01e91a3df93063b03d0f8dd5c40546687ecAffected
  • 489d77fbd66375972a380d207f7eb39b00c4a67bAffected
  • 5.10.221 to before 5.10.261Affected
  • 5.15.162 to before 5.15.212Affected
  • 6.1.96 to before 6.1.178Affected
  • 6.6.36 to before 6.6.145Affected
  • 4.19.317 to before 4.20Affected
  • 5.4.279 to before 5.5Affected
  • 6.9.7 to before 6.10Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 5.10.261 through 5.10.*Not affected
  • 5.15.212 through 5.15.*Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.