PT-2026-61223 · Linux · Linux

CVE-2026-63906 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: omap2430: Fix use-after-free in omap2430 probe()

In omap2430 probe(), of node put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of node put() calls after the last use of np in both the success and error paths.

Correção

Identificadores relacionados

CVE-2026-63906

Produtos afetados

Linux

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-63906 · Nota de Segurança
• https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772 · Nota
• https://git.kernel.org/stable/c/632fd888fe33083927e29ef651ac1aba345edd9e · Nota
• https://git.kernel.org/stable/c/d53e4c41331f57b9fd78cbf3e480c6ce20aea07b · Nota
• https://git.kernel.org/stable/c/b987f380620b38c84f054d5ff5c05861a7c2203b · Nota
• https://git.kernel.org/stable/c/69f9f2b30af03d9b6e83f78fb0f734b6066d4678 · Nota
• https://git.kernel.org/stable/c/27e62532228dc42367bb43ebbcd7bf49d8db2b0d · Nota