CVE-2026-23347

can: usb: f81604: correctly anchor the urb in the read bulk callback

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
2.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: usb: f81604: correctly anchor the urb in the read bulk callback

When submitting an urb, that is using the anchor pattern, it needs to be

anchored before submitting it otherwise it could be leaked if

usb_kill_anchored_urbs() is called. This logic is correctly done

elsewhere in the driver, except in the read bulk callback so do that

here also.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00132 · 2.5th percentile
Published
2026-03-25T10:27Z
EPSS history
Timeline
  • 25 MAR 10:27Z
    can: usb: f81604: correctly anchor the urb in the read bulk callback
    cvelistv5