CVE-2026-63905

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the vudc remove() function within the usbip vudc module due to a race condition. In vudc probe(), the v init timer() function binds udc->tr timer.timer to v timer(), and the timer is started via v start timer() or v kick timer() through usbip sockfd store(). The vudc remove() function can free the vudc structure while the timer is still pending or executing, leading to a memory corruption when the timer core attempts to walk the embedded timer list after the structure has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.