High 7.8Published Jul 25, 2026

CVE-2026-64344USB: idmouse: fix use-after-free on disconnect race

Updated under an hour ago (Oct 28, 2026, 4:00 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect race mutex_unlock() may access the mutex structure after releasing the lock and therefore cannot be used to manage lifetime of objects directly (unlike spinlocks and refcounts). [1][2] Use a kref to release the driver data to avoid use-after-free in mutex_unlock() when release() races with disconnect(). [1] a51749ab34d9 ("locking/mutex: Document that mutex_unlock() is non-atomic") [2] 2b9d9e0a9ba0 ("locking/mutex: Clarify that mutex_unlock(), and most other sleeping locks, can still use the lock object after it's unlocked")

CVSS: 7.8 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	54d2bc068fd21bcb096660938bce7c7265613a24 builds before 31e75fed8f90cfea9f8285e7ed135b0e452bf872; 54d2bc068fd21bcb096660938bce7c7265613a24 builds before 8d53b14ad4ccbff6d306b3a39c812303f4a87d41; from 54d2bc068fd21bcb096660938bce7c7265613a24 before f62622e947f82a3854a8502d09492ffbdeb252b4; from 54d2bc068fd21bcb096660938bce7c7265613a24 before 60fc5ef4ecea3e3d1fe556cecf53ddd13096ef09; from 54d2bc068fd21bcb096660938bce7c7265613a24 before d0f61acb51a8c8f3fd41c303ddb7770cd83e7ed4; 54d2bc068fd21bcb096660938bce7c7265613a24 builds before 54c2b7356b4aeea467f9fb13b85e9e036bc428cb; from 54d2bc068fd21bcb096660938bce7c7265613a24 before e88cff5fbaa629f3cab45c8b46f395d62c2eb515; from 54d2bc068fd21bcb096660938bce7c7265613a24 before ff002c153f9722caece3983cc23dc4d9d4652cb4	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.24.1 before 5.10.261; from 5.11 before 5.15.212; from 5.16 before 6.1.178; from 6.2 before 6.6.145; from 6.7 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4; 2.6.24; and 9 more ranges	NVD

References

References

https://git.kernel.org/stable/c/31e75fed8f90cfea9f8285e7ed135b0e452bf872	patch
https://git.kernel.org/stable/c/8d53b14ad4ccbff6d306b3a39c812303f4a87d41	patch
https://git.kernel.org/stable/c/f62622e947f82a3854a8502d09492ffbdeb252b4	patch
https://git.kernel.org/stable/c/60fc5ef4ecea3e3d1fe556cecf53ddd13096ef09	patch
https://git.kernel.org/stable/c/d0f61acb51a8c8f3fd41c303ddb7770cd83e7ed4	patch
https://git.kernel.org/stable/c/54c2b7356b4aeea467f9fb13b85e9e036bc428cb	patch
https://git.kernel.org/stable/c/e88cff5fbaa629f3cab45c8b46f395d62c2eb515	patch
https://git.kernel.org/stable/c/ff002c153f9722caece3983cc23dc4d9d4652cb4	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.