Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64331

In the Linux kernel, the following vulnerability has been resolved: usbip: vudc: fix NULL deref in vep_dequeue() vep_alloc_request() wasn't initializing vrequest->udc, so cancellations on the FunctionFS AIO path were arriving in vep_dequeue without a valid UDC reference. Since vrequest->udc is never actually properly used anywhere, we opt to remove it, and update vep_dequeue to obtain a reference to the udc with ep_to_vudc(), consistent with the other vep_ ops. AFAICT this bug has existed fo
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0a94e54b805ddac271fb7ce15efb0956102c05f78429d62477eca3ab964c0c71
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/usbip/vudc.h","drivers/usb/usbip/vudc_dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/usbip/vudc.h","drivers/usb/usbip/vudc_dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9858c91d9ee6a13c45311569039413729fc9b757","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"1226293ec9bed3d4cc5b05eeeb811d315ca51652","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"3750f75f29f99c0223601e2ee73ad084adec47bd","status":"affected","…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/usbip/vudc.h","drivers/usb/usbip/vudc_dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.7"},{"lessThan":"4.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/usbip/vudc.h","drivers/usb/usbip/vudc_dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9858c91d9ee6a13c45311569039413729fc9b757","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"1226293ec9bed3d4cc5b05eeeb811d315ca51652","status":"affected","version":"b6a0ca11186759ad7045d68a5447b1e89f658384","versionType":"git"},{"lessThan":"3750f75f29f99c0223601e2ee73ad084adec47bd","status":"affected","…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0025276175fbbe0dcbf3f84d090b0adee769e9d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/0443e4416aa1ee97748d1ed904eaf3352c60045e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/1226293ec9bed3d4cc5b05eeeb811d315ca51652"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/347b59e9f96719d89b6ef555d02a18ada1a5846f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/3750f75f29f99c0223601e2ee73ad084adec47bd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/9858c91d9ee6a13c45311569039413729fc9b757"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c5371e0b91b24159a3ebaa61e70b0980bcf03c0a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/d0ebf9cc7c2ddf95a7cfc654b940bdacb7edde97"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c72734b98d721f9cf87762329a75ec66d0127f25fd426c96be4f87e2c65fc443 · sha256:710d572afc54317d… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer