CVE-2026-31758

A flaw was found in the Linux kernel's usbtmc module. This vulnerability occurs because pending anchored Universal Serial Bus (USB) Request Blocks (URBs) are not flushed or killed when the usbtmc_release function is called. This can result in use-after-free errors, which could potentially lead to system crashes or, in some scenarios, arbitrary code execution.

USBTMC must flush anchored URBs on release to avoid completion after free. Red Hat recommends updates for instrument/gPIB-style USBTMC users; unload usbtmc where devices are not needed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the usbtmc module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.