PT-2026-6150 · Linux+2 · Linux Kernel+2
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23080
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue where a memory leak can occur within the
mcba usb read bulk callback() function. This is due to the USB framework unanchoring URBs before the completion function is called, preventing their release by usb kill anchored urbs(). The issue is similar to a previously resolved memory leak in gs usb receive bulk callback(). The fix involves anchoring the URB in the mcba usb read bulk callback() function to the priv->rx submitted anchor. The mcba usb probe() function allocates and submits URBs, and the mcba usb close() function attempts to free them.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu