CVE-2026-64240

kernel: media: rc: igorplugusb: fix control request setup packet

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's igorplugusb driver. This vulnerability occurs because the driver incorrectly passes a pointer instead of the actual USB control request setup packet to the USB core. As a result, the USB core misinterprets the data, leading to an invalid request type and triggering a control direction warning. This issue could potentially cause a denial of service for the affected USB device.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')