CVE Database›Document archive›CVE-2026-64337

CVE-2026-64337

kernel: usb: mtu3: unmap request DMA on queue failure

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's USB mtu3 gadget driver. When the mtu3_gadget_queue() function encounters a failure during the preparation of a USB transfer, the associated Direct Memory Access (DMA) mapping is not properly released. This leaves the DMA mapping active, which can lead to a resource leak. Repeated exploitation of this flaw could allow a local attacker to cause a denial of service by exhausting system resources.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime