CVE-2026-64342 PUBLISHED

USB: iowarrior: fix use-after-free on disconnect

Assigner: Linux
Reserved: 19.07.2026 Published: 25.07.2026 Updated: 25.07.2026

In the Linux kernel, the following vulnerability has been resolved:

USB: iowarrior: fix use-after-free on disconnect

Submitted write URBs are not stopped on close() and therefore need to be stopped unconditionally on disconnect() to avoid use-after-free in the completion handler.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to d058d377291567b72aea33b017215cbfb383b0ad (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595 (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to 97ad9337127be04ca0b027c2b01e69302353f404 (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to 164398601a7f160bc3df1efa454f983302cef03f (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to f328b0e9a0dbd162f5db1b83026b689f2fea2241 (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to b748f97aff339e7f08dca9cf38a05b980fb66fea (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to e4596816984efc537e7c04c1af0c639394f967f7 (excl.)
  • affected from 946b960d13c15f050a3b848987aaca79f6a459b7 to bc0e4f16c44e50daa0b1ea729934baa3b4815dee (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.21 is affected
  • unaffected from 0 to 2.6.21 (excl.)
  • unaffected from 5.10.261 to 5.10.* (incl.)
  • unaffected from 5.15.212 to 5.15.* (incl.)
  • unaffected from 6.1.178 to 6.1.* (incl.)
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.96 to 6.12.* (incl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc3 to * (incl.)

References