In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers… (CVE-2026-64338)
A vulnerability in the Linux kernel's USB misc driver for uss720 devices was resolved. The issue occurs when the uss720_probe() function registers a parallel port (parport) before reading a 1284 register to detect unsupported Belkin adapters. If reading this register fails, the error handling path releases driver data and USB references but leaves the parport device registered with stale pointers. This can cause resource leaks and inconsistent device state. The fix ensures the parport registration is undone on failure, preventing stale pointers and resource leaks.
AI Analysis
Technical Summary
The Linux kernel uss720 USB misc driver had a flaw where the probe function registered a parport device before confirming device compatibility via the 1284 register. On failure to read this register, the driver would drop private data and USB references but fail to unregister the parport device, leaving it registered with pointers to freed data. This could lead to resource leaks and potential instability. The patch corrects this by unregistering the parport device on probe failure and clearing private data pointers to avoid stale references.
Potential Impact
The vulnerability results in resource leaks and stale pointers within the kernel's USB subsystem for affected devices. While no direct exploitation or remote code execution is indicated, the inconsistent device state could cause kernel instability or crashes. There are no known exploits in the wild.
Mitigation Recommendations
A fix has been applied to the Linux kernel to unregister the parport device on probe failure in the uss720 driver, preventing stale pointers and resource leaks. Users should apply the official kernel updates containing this patch when available. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing lists for the specific patch and update guidance.
In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers… (CVE-2026-64338)
Description
A vulnerability in the Linux kernel's USB misc driver for uss720 devices was resolved. The issue occurs when the uss720_probe() function registers a parallel port (parport) before reading a 1284 register to detect unsupported Belkin adapters. If reading this register fails, the error handling path releases driver data and USB references but leaves the parport device registered with stale pointers. This can cause resource leaks and inconsistent device state. The fix ensures the parport registration is undone on failure, preventing stale pointers and resource leaks.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel uss720 USB misc driver had a flaw where the probe function registered a parport device before confirming device compatibility via the 1284 register. On failure to read this register, the driver would drop private data and USB references but fail to unregister the parport device, leaving it registered with pointers to freed data. This could lead to resource leaks and potential instability. The patch corrects this by unregistering the parport device on probe failure and clearing private data pointers to avoid stale references.
Potential Impact
The vulnerability results in resource leaks and stale pointers within the kernel's USB subsystem for affected devices. While no direct exploitation or remote code execution is indicated, the inconsistent device state could cause kernel instability or crashes. There are no known exploits in the wild.
Mitigation Recommendations
A fix has been applied to the Linux kernel to unregister the parport device on probe failure in the uss720 driver, preventing stale pointers and resource leaks. Users should apply the official kernel updates containing this patch when available. Patch status is not explicitly confirmed in the provided data; check the vendor or kernel mailing lists for the specific patch and update guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pghr-8xhx-xv5x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64338"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a65420b9c2644c7f8084d69
Added to database: 07/25/2026, 23:08:59 UTC
Last enriched: 07/25/2026, 23:31:27 UTC
Last updated: 07/26/2026, 06:46:50 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.