SB2026091675 - Operation on a Resource after Expiration or Release in Linux kernel usb dwc3 driver

Description

This security bulletin contains information about 1 vulnerability.

1) Operation on a Resource after Expiration or Release (CVE-ID: CVE-2026-90030)

CWE-ID: CWE-672 - Operation on a Resource after Expiration or Release

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource lifetime management in DWC3 EndTransfer handling when aborting a transfer through the ep_dequeue path and subsequently starting a transfer on the same endpoint. A local user can trigger this transfer sequence to cause a denial of service.

The observed condition affects DWC_usb31 v2.00a and v2.10a controllers.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0afe5c31612de3d18cc6d16e616da4a48ba1e5a2
• https://git.kernel.org/stable/c/b58e6200450d350314db0ecda7d6d1bde3281e80
• https://git.kernel.org/stable/c/e01408ee52fe5cb2d0b43f47f359336af2b6c316