Medium 5.5Published Jul 25, 2026

CVE-2026-64350usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

Updated under an hour ago (Oct 27, 2026, 3:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated. Free the stream context array before falling through to the stream_rings cleanup path.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3d82904559f4f5a2622db1b21de3edf2eded7664 before 37283f5a47127fbdea567749a2110766af53d18d; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before cb8e9391b7f4f77d112c51910cd7c355a337ef76; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before fde3c095e1d48e0ac3ab8bc32905da42fe58a36a; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before d9643bbe93a6aee24edee1a86e0303aa74bcd320; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before c00826e87bb75e14e0381b05da5f18ffd0241ab6; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before 963075c4da0cd43b3d17b107c355e1eb0ee64a58; from 3d82904559f4f5a2622db1b21de3edf2eded7664 before 3348f444a4ce43dd5c2d1aa41634cb6eff33aa64	CNA record
linux linux_kernel linux:linux_kernel	from 5.12 before 5.15.212; from 5.16 before 6.1.178; from 6.2 before 6.6.145; from 6.7 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4; 7.2; 7.2	NVD

References

References

https://git.kernel.org/stable/c/37283f5a47127fbdea567749a2110766af53d18d	patch
https://git.kernel.org/stable/c/cb8e9391b7f4f77d112c51910cd7c355a337ef76	patch
https://git.kernel.org/stable/c/fde3c095e1d48e0ac3ab8bc32905da42fe58a36a	patch
https://git.kernel.org/stable/c/d9643bbe93a6aee24edee1a86e0303aa74bcd320	patch
https://git.kernel.org/stable/c/c00826e87bb75e14e0381b05da5f18ffd0241ab6	patch
https://git.kernel.org/stable/c/963075c4da0cd43b3d17b107c355e1eb0ee64a58	patch
https://git.kernel.org/stable/c/3348f444a4ce43dd5c2d1aa41634cb6eff33aa64	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.