CVE-2026-64240

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the igorplugusb driver where the control request storage was changed to an allocated pointer to comply with DMA coherency rules (the requirement that the CPU and DMA-capable devices see the same data in memory). The driver incorrectly passes the address of the pointer &ir->request to the usb fill control urb() function instead of the pointer ir->request itself. Consequently, the USB core interprets the pointer's memory address bytes as the setup packet, which can result in an invalid bRequestType and trigger control direction warnings.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.