CVE-2026-23347
Published: Mar 25, 2026
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 88da17436973e463bed59bea79771fb03a21555e - < 54ee74307165b348b2fddcd7942eb48fb4ee1237affected 88da17436973e463bed59bea79771fb03a21555e - < c001214e12202338425d6dda5d2a1919d674282daffected 88da17436973e463bed59bea79771fb03a21555e - < f6d80b104f904a6da922907394eec66d3e2ffc57affected 88da17436973e463bed59bea79771fb03a21555e - < 7724645c4792914cd07f36718816c5369cc57970affected 88da17436973e463bed59bea79771fb03a21555e - < 952caa5da10bed22be09612433964f6877ba0dde |
Linux | Linux | affected 6.5unaffected 0 - < 6.5unaffected 6.6.130 - <= 6.6.*unaffected 6.12.77 - <= 6.12.*unaffected 6.18.17 - <= 6.18.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now