CVE-2026-64327

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the USB gadget functionfs module where the epfile->in variable is initialized too late. Specifically, epfile->in was only populated within the ffs func eps enable() function, which triggers upon USB host connection. Consequently, userspace ioctls such as FUNCTIONFS DMABUF ATTACH executed before the host connection would perceive epfile->in as 0, resulting in incorrect Direct Memory Access (DMA) directions. DMA is a feature that allows hardware to access main system memory independently of the central processing unit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.