CVE-2026-31582

kernel: hwmon: (powerz) Fix use-after-free on USB disconnect

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's hwmon subsystem. A local attacker, by disconnecting a USB device, could trigger a use-after-free vulnerability in the powerz driver. This occurs when the driver attempts to access a Universal Serial Bus Request Block (URB) after it has been freed during the disconnect process. This flaw can lead to system instability or a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference