CVE-2026-64331

A flaw was found in the Linux kernel's usbip virtual USB device controller (vudc). This vulnerability, a NULL pointer dereference, occurs when vep_alloc_request() fails to initialize a vrequest's udc field, causing asynchronous input/output (AIO) cancellations on the FunctionFS path to arrive without a valid UDC reference. A local attacker, or a remote attacker with control over the host's usbip attach operation to a guest, could exploit this to trigger a kernel crash, resulting in a denial of service (DoS).