CVE-2026-64342

A flaw was found in the Linux kernel's USB iowarrior driver. This vulnerability, a use-after-free, occurs because write operations are not properly halted when a device disconnects. An attacker could potentially exploit this to cause system instability or execute arbitrary code.

Red Hat rates this flaw as Moderate impact because exploitation requires local system access alongside the attachment or emulation of specialized IO-Warrior USB hardware. An unprivileged local user could potentially trigger race conditions during device detachment while write requests are pending, leading to kernel memory corruption or a system crash. Furthermore, the affected driver is not loaded by default in standard Red Hat Enterprise Linux environments unless corresponding hardware is detected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.