PT-2026-61223 · Linux · Linux

CVE-2026-63906 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: omap2430: Fix use-after-free in omap2430 probe()

In omap2430 probe(), of node put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of node put() calls after the last use of np in both the success and error paths.

Fix

Related Identifiers

CVE-2026-63906

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-63906 · Security Note
• https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772 · Note
• https://git.kernel.org/stable/c/632fd888fe33083927e29ef651ac1aba345edd9e · Note
• https://git.kernel.org/stable/c/d53e4c41331f57b9fd78cbf3e480c6ce20aea07b · Note
• https://git.kernel.org/stable/c/b987f380620b38c84f054d5ff5c05861a7c2203b · Note
• https://git.kernel.org/stable/c/69f9f2b30af03d9b6e83f78fb0f734b6066d4678 · Note
• https://git.kernel.org/stable/c/27e62532228dc42367bb43ebbcd7bf49d8db2b0d · Note