CVE-2026-64350 PUBLISHED

usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Assigner: Linux
Reserved: 19.07.2026 Published: 25.07.2026 Updated: 25.07.2026

In the Linux kernel, the following vulnerability has been resolved:

usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated.

Free the stream context array before falling through to the stream_rings cleanup path.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to 37283f5a47127fbdea567749a2110766af53d18d (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to cb8e9391b7f4f77d112c51910cd7c355a337ef76 (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to fde3c095e1d48e0ac3ab8bc32905da42fe58a36a (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to d9643bbe93a6aee24edee1a86e0303aa74bcd320 (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to c00826e87bb75e14e0381b05da5f18ffd0241ab6 (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to 963075c4da0cd43b3d17b107c355e1eb0ee64a58 (excl.)
  • affected from 3d82904559f4f5a2622db1b21de3edf2eded7664 to 3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.12 is affected
  • unaffected from 0 to 5.12 (excl.)
  • unaffected from 5.15.212 to 5.15.* (incl.)
  • unaffected from 6.1.178 to 6.1.* (incl.)
  • unaffected from 6.6.145 to 6.6.* (incl.)
  • unaffected from 6.12.96 to 6.12.* (incl.)
  • unaffected from 6.18.39 to 6.18.* (incl.)
  • unaffected from 7.1.4 to 7.1.* (incl.)
  • unaffected from 7.2-rc3 to * (incl.)

References