CVE-2026-23347

Katalog CVE

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.

Rincian

Terbit di NVD

25 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/54ee74307165b348b2fddcd7942eb48fb4ee1237 patch
• https://git.kernel.org/stable/c/7724645c4792914cd07f36718816c5369cc57970 patch
• https://git.kernel.org/stable/c/952caa5da10bed22be09612433964f6877ba0dde patch
• https://git.kernel.org/stable/c/c001214e12202338425d6dda5d2a1919d674282d patch
• https://git.kernel.org/stable/c/f6d80b104f904a6da922907394eec66d3e2ffc57 patch