PT-2026-64571 · Linux · Linux

CVE-2026-64350 · Published 2026-07-25 · Updated 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

usb: cdnsp: fix stream context array leak in cdnsp alloc stream info()

cdnsp alloc stream info() allocates stream info->stream ctx array with cdnsp alloc stream ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream rings array, but leaves stream ctx array allocated.

Free the stream context array before falling through to the stream rings cleanup path.

Related Identifiers

CVE-2026-64350

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-64350 · Security Note
• https://git.kernel.org/stable/c/cb8e9391b7f4f77d112c51910cd7c355a337ef76 · Note
• https://git.kernel.org/stable/c/c00826e87bb75e14e0381b05da5f18ffd0241ab6 · Note
• https://git.kernel.org/stable/c/fde3c095e1d48e0ac3ab8bc32905da42fe58a36a · Note
• https://git.kernel.org/stable/c/3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 · Note
• https://git.kernel.org/stable/c/d9643bbe93a6aee24edee1a86e0303aa74bcd320 · Note
• https://git.kernel.org/stable/c/37283f5a47127fbdea567749a2110766af53d18d · Note
• https://git.kernel.org/stable/c/963075c4da0cd43b3d17b107c355e1eb0ee64a58 · Note