CVE-2026-23347

kernel: can: usb: f81604: correctly anchor the urb in the read bulk callback

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's can: usb: f81604 driver. When a USB Request Block (urb) is submitted, it is not correctly anchored in the read bulk callback. This oversight could lead to a resource leak if usb_kill_anchored_urbs() is called, potentially resulting in a Denial of Service (DoS) due to resource exhaustion.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-771 · Missing Reference to Active Allocated Resource