CVE-2026-98772

A flaw was found in the Linux kernel's USB serial subsystem. This flaw may result in a Denial of Service (DoS) due to a use-after-free vulnerability. During multiport device disconnection, a race condition allows background completion handlers to access port driver data after it has already been freed. A local user or an attacker with physical access could exploit this timing issue during device teardown to trigger a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.