CVE-2026-64342

USB: iowarrior: fix use-after-free on disconnect

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: iowarrior: fix use-after-free on disconnect

Submitted write URBs are not stopped on close() and therefore need to be stopped unconditionally on disconnect() to avoid use-after-free in the completion handler.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	946b960d13c15f050a3b848987aaca79f6a459b7 to before d058d377291567b72aea33b017215cbfb383b0adAffected 946b960d13c15f050a3b848987aaca79f6a459b7 to before a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595Affected 946b960d13c15f050a3b848987aaca79f6a459b7 to before 97ad9337127be04ca0b027c2b01e69302353f404Affected 946b960d13c15f050a3b848987aaca79f6a459b7 to before 164398601a7f160bc3df1efa454f983302cef03fAffected 946b960d13c15f050a3b848987aaca79f6a459b7 to before f328b0e9a0dbd162f5db1b83026b689f2fea2241Affected 946b960d13c15f050a3b848987aaca79f6a459b7 to before b748f97aff339e7f08dca9cf38a05b980fb66feaAffected 946b960d13c15f050a3b848987aaca79f6a459b7 to before e4596816984efc537e7c04c1af0c639394f967f7Affected 946b960d13c15f050a3b848987aaca79f6a459b7 to before bc0e4f16c44e50daa0b1ea729934baa3b4815deeAffected
LinuxLinux	2.6.21Affected before 2.6.21Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

946b960d13c15f050a3b848987aaca79f6a459b7 to before d058d377291567b72aea33b017215cbfb383b0adAffected
946b960d13c15f050a3b848987aaca79f6a459b7 to before a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595Affected
946b960d13c15f050a3b848987aaca79f6a459b7 to before 97ad9337127be04ca0b027c2b01e69302353f404Affected
946b960d13c15f050a3b848987aaca79f6a459b7 to before 164398601a7f160bc3df1efa454f983302cef03fAffected
946b960d13c15f050a3b848987aaca79f6a459b7 to before f328b0e9a0dbd162f5db1b83026b689f2fea2241Affected
946b960d13c15f050a3b848987aaca79f6a459b7 to before b748f97aff339e7f08dca9cf38a05b980fb66feaAffected
946b960d13c15f050a3b848987aaca79f6a459b7 to before e4596816984efc537e7c04c1af0c639394f967f7Affected
946b960d13c15f050a3b848987aaca79f6a459b7 to before bc0e4f16c44e50daa0b1ea729934baa3b4815deeAffected

LinuxLinux

2.6.21Affected
before 2.6.21Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.