CVE-2026-68374

HighCVSS 7.8

Published: 10/08/2026(UTC)Updated: 18/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

In the Linux kernel, the USB subsystem lacks synchronization in bos_descriptors_read(), which accesses udev->bos. This field can be concurrently freed in usb_reset_and_verify_device(), leading to a race condition.

Risk Assessment

The race may lead to use-after-free, potentially causing system crash or privilege escalation with a malicious USB device.

Recommendation

Update the Linux kernel to a version that adds a lock in bos_descriptors_read() to ensure safe access to udev->bos.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.