CVE-2026-64344

USB: idmouse: fix use-after-free on disconnect race

State: Published
Severity: Not scored
Published: Jul 25, 2026
Updated: Aug 17, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: idmouse: fix use-after-free on disconnect race

mutex_unlock() may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly (unlike spinlocks and refcounts). [1][2]

Use a kref to release the driver data to avoid use-after-free in mutex_unlock() when release() races with disconnect().

[1] a51749ab34d9 ("locking/mutex: Document that mutex_unlock() is non-atomic") [2] 2b9d9e0a9ba0 ("locking/mutex: Clarify that mutex_unlock(), and most other sleeping locks, can still use the lock object after it's unlocked")

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	54d2bc068fd21bcb096660938bce7c7265613a24 to before 31e75fed8f90cfea9f8285e7ed135b0e452bf872Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before 8d53b14ad4ccbff6d306b3a39c812303f4a87d41Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before f62622e947f82a3854a8502d09492ffbdeb252b4Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before 60fc5ef4ecea3e3d1fe556cecf53ddd13096ef09Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before d0f61acb51a8c8f3fd41c303ddb7770cd83e7ed4Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before 54c2b7356b4aeea467f9fb13b85e9e036bc428cbAffected 54d2bc068fd21bcb096660938bce7c7265613a24 to before e88cff5fbaa629f3cab45c8b46f395d62c2eb515Affected 54d2bc068fd21bcb096660938bce7c7265613a24 to before ff002c153f9722caece3983cc23dc4d9d4652cb4Affected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

54d2bc068fd21bcb096660938bce7c7265613a24 to before 31e75fed8f90cfea9f8285e7ed135b0e452bf872Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before 8d53b14ad4ccbff6d306b3a39c812303f4a87d41Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before f62622e947f82a3854a8502d09492ffbdeb252b4Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before 60fc5ef4ecea3e3d1fe556cecf53ddd13096ef09Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before d0f61acb51a8c8f3fd41c303ddb7770cd83e7ed4Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before 54c2b7356b4aeea467f9fb13b85e9e036bc428cbAffected
54d2bc068fd21bcb096660938bce7c7265613a24 to before e88cff5fbaa629f3cab45c8b46f395d62c2eb515Affected
54d2bc068fd21bcb096660938bce7c7265613a24 to before ff002c153f9722caece3983cc23dc4d9d4652cb4Affected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.