CVE-2024-40927 is a high-severity vulnerability in the Linux kernel's xHCI USB driver related to improper handling of Transfer Descriptors (TDs) when multiple streams are active. The flaw causes stale TDs to remain uncleared when an endpoint is stopped, leading to crashes and memory corruption, especially with UAS devices. This bug dates back 14 years and has been fixed in recent kernel updates.