CVE-2026-98762

USB: dwc2: shut down wakeup timer before freeing HCD state

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: dwc2: shut down wakeup timer before freeing HCD state

dwc2_wakeup_detected() accesses the DWC2 host state and can rearm the wakeup timer. dwc2_hcd_free() currently deletes the timer only after freeing host-owned state, and timer_delete() does not synchronize a callback or prevent it from being queued again.

Stop and shut down the timer in dwc2_hcd_release(), before the HCD resources are freed. This covers both the HCD initialization error path and normal HCD removal.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7359d482eb4d3967cc8be354405ae6be6eaf732c to before f3d76baa5b902f681100447e9d185819c5c1316dAffected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before 0b2ea59d66d046d5601ffc3e61dd09d3597c704eAffected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before 82cc242da6d621752718929e6a2fa6f9554ebffeAffected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before 441be312fce927443eae2821f502344d953c38bbAffected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before 4333174ea52c863a50bb3e0a4726bf9f7cdf7524Affected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before 79ba37dd38a321cb32a79332a3e3c68dd334dca9Affected 7359d482eb4d3967cc8be354405ae6be6eaf732c to before fd772af9512cdecb83de34a461801533828e77fdAffected
LinuxLinux	3.10Affected before 3.10Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7359d482eb4d3967cc8be354405ae6be6eaf732c to before f3d76baa5b902f681100447e9d185819c5c1316dAffected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before 0b2ea59d66d046d5601ffc3e61dd09d3597c704eAffected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before 82cc242da6d621752718929e6a2fa6f9554ebffeAffected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before 441be312fce927443eae2821f502344d953c38bbAffected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before 4333174ea52c863a50bb3e0a4726bf9f7cdf7524Affected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before 79ba37dd38a321cb32a79332a3e3c68dd334dca9Affected
7359d482eb4d3967cc8be354405ae6be6eaf732c to before fd772af9512cdecb83de34a461801533828e77fdAffected

LinuxLinux

3.10Affected
before 3.10Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.