CVE-2026-64349

kernel: usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's USB dwc3 driver. Incorrect type handling in the dwc3_readl() and dwc3_writel() functions within dwc3_ulpi_setup() can lead to memory corruption. This vulnerability may allow an attacker to cause system instability or potentially execute arbitrary code, depending on the specific memory corruption scenario.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')