GHSA-hh3m-2ww4-7gxqHighCVSS 7.8

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock...

Published
August 10, 2026
Last Modified
August 14, 2026

🔗 CVE IDs covered (1)

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

usb: core: sysfs: add lock to bos_descriptors_read()

Add a lock to the function bos_descriptors_read().

This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

🔗 References (6)