CVE-2026-64465

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the USB xHCI driver where the xhci free streams() function is called to free stream resources when a USB device with active stream endpoints is disconnected. The function calls xhci free stream info() while holding the xhci->lock with interrupts disabled, creating an atomic context. Subsequently, xhci free stream info() invokes xhci free stream ctx(), which calls dma free coherent() for large stream context arrays. Because dma free coherent() can sleep (for example, via vunmap), it triggers a system BUG when executed within an atomic context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.