CVE-2026-68370
Description
A flaw was found in the Linux kernel's USB gadget dummy Host Controller Driver (HCD). A race condition can occur when a shared USB request object (fifo_req) is prematurely reused before its completion callback has finished. This can lead to the overwriting of the callback pointer, causing a general protection fault or page fault. The most significant consequence is a system crash, resulting in a Denial of Service (DoS).
Understanding the Weakness (CWE)
Integrity,Confidentiality,Other
Technical Impact: Modify Application Data; Read Application Data; Alter Execution Logic
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
