CVE-2026-64594

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the USB gadget functionfs module where reset work is not consistently initialized. When a functionfs instance is unmounted, the ffs fs kill sb() function calls cancel work sync() on ffs->reset work. However, reset work is only initialized in specific deactivation paths, such as when the instance is mounted with the no disconnect option. In common scenarios, ffs data new() allocates ffs data without initializing reset work, leaving reset work.func as NULL. This causes the flush work() function to trigger a warning when cancel work sync() is called on the uninitialized work structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.