In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits… (CVE-2026-64348)
A memory management vulnerability in the Linux kernel's USB subsystem involving EHCI and FOTG210 isochronous USB transfers has been resolved. The issue occurs when a failure in submitting USB requests leads to a staged schedule being leaked due to not being freed properly. This bug was identified through experimental analysis tools and manual inspection confirmed its presence in kernel version 7.1.1. No runtime testing was performed due to hardware limitations. No CVSS score is available for this vulnerability.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel USB subsystem affects the handling of isochronous USB request blocks (URBs) for EHCI and FOTG210 controllers. When the controller becomes inaccessible or the function usb_hcd_link_urb_to_ep() fails, the staged isochronous schedule attached to urb->hcpriv is not freed, causing a memory leak. The fix involves freeing the staged schedule in the failure path before the URB is linked and clearing urb->hcpriv afterward. This bug was detected by an experimental kernel memory-management analysis tool and confirmed manually in kernel version 7.1.1. Due to lack of appropriate hardware, runtime testing was not performed.
Potential Impact
The vulnerability causes a memory leak in the Linux kernel USB subsystem during failed isochronous USB request submissions. While no direct exploitation details or impact severity are provided, memory leaks can degrade system stability or potentially be leveraged in complex attack scenarios. There are no known exploits in the wild. The impact is limited to affected Linux kernel versions with EHCI and FOTG210 USB host controllers handling isochronous transfers.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to free the staged isochronous schedule on failed USB request submissions and clear the associated pointer. Users should update to a Linux kernel version that includes this fix. Since no specific patched versions are provided, check the official Linux kernel advisories or source repositories for the commit addressing CVE-2026-64348 to apply the official fix. No other mitigation actions are indicated.
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits… (CVE-2026-64348)
Description
A memory management vulnerability in the Linux kernel's USB subsystem involving EHCI and FOTG210 isochronous USB transfers has been resolved. The issue occurs when a failure in submitting USB requests leads to a staged schedule being leaked due to not being freed properly. This bug was identified through experimental analysis tools and manual inspection confirmed its presence in kernel version 7.1.1. No runtime testing was performed due to hardware limitations. No CVSS score is available for this vulnerability.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel USB subsystem affects the handling of isochronous USB request blocks (URBs) for EHCI and FOTG210 controllers. When the controller becomes inaccessible or the function usb_hcd_link_urb_to_ep() fails, the staged isochronous schedule attached to urb->hcpriv is not freed, causing a memory leak. The fix involves freeing the staged schedule in the failure path before the URB is linked and clearing urb->hcpriv afterward. This bug was detected by an experimental kernel memory-management analysis tool and confirmed manually in kernel version 7.1.1. Due to lack of appropriate hardware, runtime testing was not performed.
Potential Impact
The vulnerability causes a memory leak in the Linux kernel USB subsystem during failed isochronous USB request submissions. While no direct exploitation details or impact severity are provided, memory leaks can degrade system stability or potentially be leveraged in complex attack scenarios. There are no known exploits in the wild. The impact is limited to affected Linux kernel versions with EHCI and FOTG210 USB host controllers handling isochronous transfers.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to free the staged isochronous schedule on failed USB request submissions and clear the associated pointer. Users should update to a Linux kernel version that includes this fix. Since no specific patched versions are provided, check the official Linux kernel advisories or source repositories for the commit addressing CVE-2026-64348 to apply the official fix. No other mitigation actions are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-c2pf-rr3m-qvwf
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64348"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420c9c2644c7f8085366
Added to database: 07/25/2026, 23:09:00 UTC
Last enriched: 07/25/2026, 23:32:48 UTC
Last updated: 07/26/2026, 06:16:23 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.