CVE-2026-68374

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the USB core sysfs implementation. The function bos descriptors read() accesses the udev->bos variable without proper synchronization. This variable can be simultaneously freed by the usb reset and verify device() function, which is frequently invoked by various drivers across the kernel, potentially leading to a system crash or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.