CVE-2026-64337
kernel: usb: mtu3: unmap request DMA on queue failure
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · July 29, 2026
Description
A flaw was found in the Linux kernel's USB mtu3 gadget driver. When the mtu3_gadget_queue() function encounters a failure during the preparation of a USB transfer, the associated Direct Memory Access (DMA) mapping is not properly released. This leaves the DMA mapping active, which can lead to a resource leak. Repeated exploitation of this flaw could allow a local attacker to cause a denial of service by exhausting system resources.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime