CVE-2026-63874

kernel: net: mctp: usb: fix race between urb completion and rx_retry cancellation

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's USB Management Component Transport Protocol (MCTP) driver. A race condition exists between the completion of a USB Request Block (URB) and the cancellation of retry operations during the driver's shutdown process. This timing issue can cause a URB to be re-queued, potentially leading to unexpected system behavior or resource management issues. This vulnerability could impact system stability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition