CVE-2026-63905

kernel: usbip: vudc: Fix use after free bug in vudc_remove due to race condition

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · July 21, 2026

Description

A flaw was found in the Linux kernel's USB/IP Virtual USB Device Controller (vudc) component. A race condition exists in the vudc_remove() function, which can lead to a use-after-free vulnerability. This occurs when the system attempts to free a data structure while a timer within it is still active or pending. A local attacker could exploit this by repeatedly manipulating USB/IP devices, potentially causing memory corruption and system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference