Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-68374

Опубликовано: 10 авг. 2026
Источник: redhat
CVSS3: 7
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

A flaw was found in the Linux kernel's USB core subsystem. A missing synchronization mechanism in the bos_descriptors_read() function allows for a use-after-free vulnerability. This occurs when the udev->bos object is accessed while it is simultaneously being freed, potentially leading to a system crash (denial of service) or, in some cases, arbitrary code execution.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelAffected
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelAffected
Red Hat Enterprise Linux 7kernel-rtAffected
Red Hat Enterprise Linux 8kernelAffected
Red Hat Enterprise Linux 8kernel-rtWill not fix
Red Hat Enterprise Linux 9kernelAffected
Red Hat Enterprise Linux 9kernel-rtAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-825
https://bugzilla.redhat.com/show_bug.cgi?id=2513456kernel: usb: core: sysfs: add lock to bos_descriptors_read()

EPSS

Процентиль: 3%
0.00128
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
22 дня назад

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

CVSS3: 7.8
nvd
22 дня назад

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

msrc
21 день назад

usb: core: sysfs: add lock to bos_descriptors_read()

CVSS3: 7.8
debian
22 дня назад

In the Linux kernel, the following vulnerability has been resolved: u ...

CVSS3: 7.8
github
21 день назад

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

EPSS

Процентиль: 3%
0.00128
Низкий

7 High

CVSS3