Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64328

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix DMA fence leak In ffs_dmabuf_transfer(), a ffs_dma_fence object is kmalloc'd, with the underlying dma_fence later initialized by dma_fence_init(), which sets its kref counter to 1. Then, dma_resv_add_fence() gets a second reference, and a pointer to the ffs_dma_fence is passed as the usb_request's "context" field. The dma-resv mechanism will manage the second reference, but the first reference is never
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a298c209031ce071f4829759d9f9ad680461ce977a1a76e7325b07987c6e7eab
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b7475b2dce5e121e687280ba5732ccefe77ffd2f","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"e086c16962a1b0142e2675610e9c06fcfcd4c3a8","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"0cae3d6109427c455bad0a18dfb3e2a91657e38a","status":"affected","version":"7b07a2a7ca0…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.96","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.39","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.4","versionType":"semver"},{"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_fs.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b7475b2dce5e121e687280ba5732ccefe77ffd2f","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"e086c16962a1b0142e2675610e9c06fcfcd4c3a8","status":"affected","version":"7b07a2a7ca02a20124b552be96c5a56910795488","versionType":"git"},{"lessThan":"0cae3d6109427c455bad0a18dfb3e2a91657e38a","status":"affected","version":"7b07a2a7ca0…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/0cae3d6109427c455bad0a18dfb3e2a91657e38a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b7475b2dce5e121e687280ba5732ccefe77ffd2f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/baa6b6068a3f2bf2ed525a1cb37975905dadc658"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e086c16962a1b0142e2675610e9c06fcfcd4c3a8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d1cb590932ef2c1f390ac15b4a39a5860799f577846d4855570a945c678cdc4f · sha256:842e6f9068f62d53… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer