CVE-2026-46103
Published: May 27, 2026
Modified: Jun 1, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than parent USB device. This avoids issues like memory leaks when drivers are unbound without their devices being physically disconnected (e.g. on probe deferral or configuration changes). Fix the control message buffer lifetime so that it is released on driver unbind.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 9f2d3eae88d26c29d96e42983b755940d9169cd9 - < 3df5b9110ac08f67ccfe382fc172bfee95688eecaffected 9f2d3eae88d26c29d96e42983b755940d9169cd9 - < 4b7d07747400cfd7eff1ba7b8b5a7c8d5a58f705affected 9f2d3eae88d26c29d96e42983b755940d9169cd9 - < 10b7b676b78a7bd888d19729b459aad7fc1f428baffected 9f2d3eae88d26c29d96e42983b755940d9169cd9 - < c524c124e3094d2de12235a513854c03d06a2b58affected 9f2d3eae88d26c29d96e42983b755940d9169cd9 - < c0d3ccc6929e4509076df8f30a4fb1dc5018b0ae+1 more versions |
Linux | Linux | affected 4.19unaffected 0 - < 4.19unaffected 6.1.175 - <= 6.1.*unaffected 6.6.140 - <= 6.6.*unaffected 6.12.86 - <= 6.12.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now