CVE-2026-64455

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The chaoskey driver contains a slab-use-after-free issue within its release routine. This occurs when a user closes the device file after the USB device has been unplugged, causing a debugging log statement to attempt to access the usb interface structure after it has been deallocated. The issue is triggered in the chaoskey release() function, which calls dynamic dev dbg() and subsequently dev driver string(). The root cause is that the last reference to the interface structure is dropped in the chaoskey free() routine, making any subsequent access to the interface invalid.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.