CVE-2026-93121

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ffs dmabuf transfer() function within the USB gadget f fs module. In error paths related to endpoint-disabled (ESHUTDOWN) and request-allocation failure (ENOMEM), the system incorrectly calls dma fence put() on a fence object that has been allocated via kmalloc but not yet initialized by dma fence init(). Because the refcount and fence operations remain uninitialized, this action leads to undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.