CVE-2026-23324
kernel: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's etas_es58x USB CAN bus driver. The driver fails to correctly anchor the USB Request Block (urb) in the read bulk callback. This oversight can lead to a memory leak if usb_kill_anchored_urbs() is called without the urb being properly anchored. The continuous leakage of memory could result in system instability or a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime