Riskcovery

CVE-2026-64341

USB: iowarrior: fix use-after-free on disconnect race

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: iowarrior: fix use-after-free on disconnect race

mutex_unlock() may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly (unlike spinlocks and refcounts). [1][2]

Use a kref to release the driver data to avoid use-after-free in mutex_unlock() when release() races with disconnect().

[1] a51749ab34d9 ("locking/mutex: Document that mutex_unlock() is non-atomic") [2] 2b9d9e0a9ba0 ("locking/mutex: Clarify that mutex_unlock(), and most other sleeping locks, can still use the lock object after it's unlocked")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before 9472acd56a020c93be4189d2dba9c743b9fc8039Affected
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before 4e7d3c98fed73d3be84d3e146d8d9be0309e725bAffected
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before 3c0a7b29ebb391d5f50b115e86f842b709195b08Affected
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before 30ec3025b771511625375fb3fb959aea3b45fb0dAffected
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before 71590982700fdeb39a37a500c877228b0140978eAffected
  • 946b960d13c15f050a3b848987aaca79f6a459b7 to before c602254ba4c10f60a73cd99d147874f86a3f485cAffected
LinuxLinux
  • 2.6.21Affected
  • before 2.6.21Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.58 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.