CVE-2026-23347
Description
A flaw was found in the Linux kernel's can: usb: f81604 driver. When a USB Request Block (urb) is submitted, it is not correctly anchored in the read bulk callback. This oversight could lead to a resource leak if usb_kill_anchored_urbs() is called, potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
Understanding the Weakness (CWE)
Availability
Technical Impact: DoS: Resource Consumption (Other)
An attacker that can influence the allocation of resources that are not properly maintained could deplete the available resource pool and prevent all other processes from accessing the same type of resource.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
