CVE Explorer

CVE-2026-64327

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks When parsing endpoint descriptors, ffs_data_got_descs() generates the eps_addrmap which contains the endpoint direction. However, epfile->in was previously only populated in ffs_func_eps_enable() which executes upon USB host connection. As a result, early userspace ioctls like FUNCTIONFS_DMABUF_ATTACH that run before the host connects would see epf

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8a71ad46b2a73ff381978522997c6e755114153f565e34fe60b04659e5b7b66d

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"82cf1142e5ccf2b6d6d22ef713aaf3e5f2b5716b","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"9e04055ab5fc0470a0031ee6934739f9aa8f34a5","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"f99f32ea9aa976afcbec20647ed33b50a52002c1","status":"affected","version":"7b07a2a7ca0…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/affected/1

Source references

4 source assertions

{"url":"https://git.kernel.org/stable/c/82cf1142e5ccf2b6d6d22ef713aaf3e5f2b5716b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/82cfd4739011bdc7e87b5d585703427e89ddfaa5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/9e04055ab5fc0470a0031ee6934739f9aa8f34a5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/f99f32ea9aa976afcbec20647ed33b50a52002c1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2cda18f37eac94aab05c94f4ea7539b42ad5b6a72388802486eee253b59f4e34 · sha256:0b3c58fe69b13ddb… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer