CVE-2026-74441

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A synchronization issue exists during port unregistration in the USB Type-C UCSI subsystem. Pending partner work items can race against workqueue destruction, resulting in use-after-free conditions, kernel NULL pointer dereferences, or general protection faults. The issue involves the ucsi poll worker workqueue and the ucsi init() error paths. To resolve this, the system must ensure strict ordering and serialization during teardown by utilizing the ucsi unregister port() helper function, protecting ucsi unregister partner() under the connector mutex lock, and replacing mod delayed work() with a sequence of cancel delayed work() and queue delayed work() to prevent double release of resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.