PT-2026-64571 · Linux · Linux

CVE-2026-64350 · Publicado 2026-07-25 · Atualizado 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

usb: cdnsp: fix stream context array leak in cdnsp alloc stream info()

cdnsp alloc stream info() allocates stream info->stream ctx array with cdnsp alloc stream ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream rings array, but leaves stream ctx array allocated.

Free the stream context array before falling through to the stream rings cleanup path.

Identificadores relacionados

CVE-2026-64350

Produtos afetados

Linux

Referências · 8

• https://git.kernel.org/stable/c/cb8e9391b7f4f77d112c51910cd7c355a337ef76 · Nota
• https://git.kernel.org/stable/c/c00826e87bb75e14e0381b05da5f18ffd0241ab6 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64350 · Nota de Segurança
• https://git.kernel.org/stable/c/fde3c095e1d48e0ac3ab8bc32905da42fe58a36a · Nota
• https://git.kernel.org/stable/c/3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 · Nota
• https://git.kernel.org/stable/c/d9643bbe93a6aee24edee1a86e0303aa74bcd320 · Nota
• https://git.kernel.org/stable/c/37283f5a47127fbdea567749a2110766af53d18d · Nota
• https://git.kernel.org/stable/c/963075c4da0cd43b3d17b107c355e1eb0ee64a58 · Nota