CVE-2026-23075

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the esd usb read bulk callback() function. This issue occurs because the USB framework unanchors URBs before the completion function is called, preventing their release in esd usb close(). The fix involves anchoring the URB in the esd usb read bulk callback() function to the dev->rx submitted anchor. This issue is similar to a previously resolved memory leak in the gs usb receive bulk callback() function (commit 7352e1d5932a). The vulnerability affects USB-in transfers managed through URBs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.