CVE-2026-64346

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the USB gadget UDC management where the lifecycles of the gadget and the udc structure are decoupled. This occurs when usb del gadget() frees the udc memory while gadget match driver() concurrently accesses it, leading to a Use-After-Free (UAF) condition. This issue can trigger a NULL pointer dereference when the freed memory is zeroed. The flaw involves the gadget match driver() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.