CVE-2026-64348

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1.2

Description A memory leak occurs in the Linux kernel during isochronous submits for EHCI and FOTG210. The system builds an ehci iso sched and stores the staged schedule in urb->hcpriv before linking the USB Request Block (URB) to the endpoint queue. If the controller becomes inaccessible or the usb hcd link urb to ep() function fails, the process jumps to done not linked before the handoff occurs, causing the staged schedule attached to urb->hcpriv to be leaked. This issue is triggered when the iso stream schedule() function and link helpers do not consume the schedule.

Recommendations Update the Linux kernel to version 7.1.2 or later to ensure the staged schedule is freed from done not linked when a submit fails before the URB is linked and urb->hcpriv is cleared.