Back to overview

CVE-2026-64337

Description
In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3_gadget_queue() maps the request before checking whether the QMU GPD ring can accept another transfer. the request is returned with -EAGAIN before it is linked on the endpoint request list if mtu3_prepare_transfer() fails. Normal completion and dequeue paths unmap requests from mtu3_req_complete(), but this error path never reaches that helper, so the DMA mapping is left active. Unmap the request before returning from the failed queue path.

Metadata

CVE ID
CVE-2026-64337
State
PUBLISHED
Assigner
Linux
Reserved
2026-07-19 15:36 UTC
Published
2026-07-25 08:50 UTC
Last updated
2026-07-25 08:50 UTC
Vendor / Product
Linux / Linux
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (2)
VendorProductPlatformVersions
Linux Linux df2069acb00569a6299d6e11aa1865eeba463848 < 3cee30f1138281a1d247bb053a1ad4f7c5b04e98, df2069acb00569a6299d6e11aa1865eeba463848 < f3c4026524d3660c73ef2838b99776d37631e039, df2069acb00569a6299d6e11aa1865eeba463848 < e8f739a3860d043dcc135371637e82f53132efe5, df2069acb00569a6299d6e11aa1865eeba463848 < 4183874b7925f4a98b400cf857bea26ee87da236 …
Linux Linux 4.10, 0 < 4.10, 5.10.261 ≤ 5.10.*, 5.15.212 ≤ 5.15.* …
Back to overview