CVE-2026-63927 | In the Linux kernel, the following vulnerability has been re… | CVSS 7.8 HIGH

Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix use after free in debug code We're not allowed to dereference "urb" after calling usb_hcd_giveback_urb() so save the urb->status ahead of time.

Metadata

CVE ID: CVE-2026-63927
State: PUBLISHED
Assigner: Linux
Reserved: 2026-07-19 07:54 UTC
Published: 2026-07-19 14:55 UTC
Last updated: 2026-07-20 13:41 UTC
Vendor / Product: Linux / Linux
Sources: cve.org · NVD

Severity & Metrics

7.8 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products (2)

Vendor	Product	Platform	Versions
Linux	Linux	—	7359d482eb4d3967cc8be354405ae6be6eaf732c < d5fc183ed614aeba6779cc992325be560f9a4451, 7359d482eb4d3967cc8be354405ae6be6eaf732c < 63b0dafa676aad4d0c3f01a61ad8e2990907660c, 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913, 7359d482eb4d3967cc8be354405ae6be6eaf732c < 0584af4fe40fa5e254a05d69ce658746de641708 …
Linux	Linux	—	3.10, 0 < 3.10, 5.10.259 ≤ 5.10., 5.15.210 ≤ 5.15. …

CVSS scores (1)

Score	Severity	Version	Source	Vector
7.8	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References (8)