CVE-2026-64348

kernel: usb: free iso schedules on failed submit

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's Universal Serial Bus (USB) subsystem. When an isochronous USB request block (URB) submission fails, the associated schedule is not properly freed. This memory leak can accumulate over time, potentially leading to memory exhaustion and a denial of service (DoS) for the system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime