CVE-2026-64585

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the esd usb disconnect() function. The function frees each CAN netdev using free candev() within a loop and subsequently calls unlink all urbs(dev). Because the per-netdev private data struct esd usb net priv is embedded in the net device allocation, unlink all urbs() dereferences memory that has already been freed when attempting to kill the per-netdev TX anchor via usb kill anchored urbs(&priv->tx submitted), clear active tx jobs, and reset priv->tx contexts[].

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.