Use-after-free in Linux kernel - CVE-2026-64583

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a use-after-free in the Broadcom BDC USB gadget UDC driver IRQ handler and delayed work processing when tearing down the driver during device removal. A local user can trigger a shared interrupt or delayed work execution during teardown to cause a denial of service.

The issue occurs in the window after teardown of endpoint and DMA-related structures begins while the IRQ handler remains deliverable, and delayed work may also execute after removal.

Affected software

How to mitigate CVE-2026-64583

External References

• https://git.kernel.org/stable/c/0583f2fbf8f86ae3a0ce054f96783dd83e65d9bb
• https://git.kernel.org/stable/c/1a1d7158420df6b8fa1efc0cdd6ab704801a4fc8
• https://git.kernel.org/stable/c/d4964a74717107697999f48bcb4e80a9c0679a27
• https://git.kernel.org/stable/c/dcf3e2f164435b5844706cb8eefef29ebee0eedb
• https://git.kernel.org/stable/c/f6fc21ec7ccd83726ba766d73d0b8cc03e726475

Related Security Bulletins

• Use-after-free in Linux kernel udc bdc driver
• Debian update for linux