Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63905

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: Fix use after free bug in vudc_remove due to race condition This patch follows up Zheng Wang's 2023 report of a use-after-free in vudc_remove(). The original thread stalled on Shuah Khan's request for runtime testing of the unplug/unbind path. This patch supplies that testing and keeps Zheng's original fix shape. In vudc_probe(), v_init_timer() binds udc->tr_timer.timer to v_timer(). usbip_sockfd_store() starts t
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6c808c8a754fa64efabf838e68555137195aebfef9c30ea366f1a4db73c14a6c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/usbip/vudc_dev.c","drivers/usb/usbip/vudc_transfer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/usbip/vudc_dev.c","drivers/usb/usbip/vudc_transfer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"61704e5cf9cd7464b510eb606e7e2978b1160a64","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"dcc1c90b28b28b7c493547506297e78653f81952","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"1036ac6148995feaf486014d32bf26bf993c06a9","status":"af…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/usbip/vudc_dev.c","drivers/usb/usbip/vudc_transfer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/usbip/vudc_dev.c","drivers/usb/usbip/vudc_transfer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"61704e5cf9cd7464b510eb606e7e2978b1160a64","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"dcc1c90b28b28b7c493547506297e78653f81952","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"1036ac6148995feaf486014d32bf26bf993c06a9","status":"af…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1036ac6148995feaf486014d32bf26bf993c06a9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/207bf80362df3fce8ebc9723351dcb1bc6d9ed0f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/61704e5cf9cd7464b510eb606e7e2978b1160a64"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/88d459e5b5a46da1ef9fd6f52d9439343edeec88"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a0638db2340ee053ab0450656a763fd111475e54"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d07ed707467ce05ea9c03412d0c5ee9d0fe386a6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d96209626a29ea64666be98c30b30ac82e5f1be6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/dcc1c90b28b28b7c493547506297e78653f81952"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0d00f662da85e7de3b8eb0ec5059ab6ff1f45d7bb3d487cb5b0ce4e45ceb3790 · sha256:c36b9e09275042ce… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer