CVE-2026-23080

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a memory leak can occur within the mcba usb read bulk callback() function. This is due to the USB framework unanchoring URBs before the completion function is called, preventing their release by usb kill anchored urbs(). The issue is similar to a previously resolved memory leak in gs usb receive bulk callback(). The fix involves anchoring the URB in the mcba usb read bulk callback() function to the priv->rx submitted anchor. The mcba usb probe() function allocates and submits URBs, and the mcba usb close() function attempts to free them.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.