CVE-2026-64344

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the USB idmouse driver due to a race condition between the release() and disconnect() functions. The problem occurs because mutex unlock() may access the mutex structure after the lock has been released, meaning it cannot be used to manage the lifetime of objects directly. To resolve this, a kref (kernel reference count) is used to manage the release of driver data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.