Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64348

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehci_iso_sched before linking the URB to the endpoint queue, and keep the staged schedule in urb->hcpriv until iso_stream_schedule() and the link helpers consume it. If the controller is no longer accessible, or usb_hcd_link_urb_to_ep() fails, submit jumps to done_not_linked before that handoff happens and leaks the staged schedule still att
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f04d2fe70b1e3584fcc31683bf4b4c6f85ee50fd121bcfa0740c4883b17ba7d8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/fotg210/fotg210-hcd.c","drivers/usb/host/ehci-sched.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b0d00d077f9738d215af9b50c74dffab7a1de19f","status":"affected","version":"8de98402652c01839ae321be6cb3054cf5735d83","versionType":"git"},{"lessThan":"be5004395dfd0b6ec310db359f887fa396fd0dd2","status":"affected","version":"8de98402652c01839ae321be6cb3054cf5735d83","versionType":"git"},{"lessThan":"8890699eea19027ef6e4f9cbcf27cba5e789793f","status":"a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/fotg210/fotg210-hcd.c","drivers/usb/host/ehci-sched.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.15"},{"lessThan":"2.6.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/fotg210/fotg210-hcd.c","drivers/usb/host/ehci-sched.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b0d00d077f9738d215af9b50c74dffab7a1de19f","status":"affected","version":"8de98402652c01839ae321be6cb3054cf5735d83","versionType":"git"},{"lessThan":"be5004395dfd0b6ec310db359f887fa396fd0dd2","status":"affected","version":"8de98402652c01839ae321be6cb3054cf5735d83","versionType":"git"},{"lessThan":"8890699eea19027ef6e4f9cbcf27cba5e789793f","status":"a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/fotg210/fotg210-hcd.c","drivers/usb/host/ehci-sched.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.15"},{"lessThan":"2.6.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/4bb88aee6b868cbf73bf453f62497802f5fe4769"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/6bc17a78a05671d303820224fb37ca339c1dc2cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8890699eea19027ef6e4f9cbcf27cba5e789793f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b0d00d077f9738d215af9b50c74dffab7a1de19f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b9399d25fbb34a05bbe76eeedd730f62ff2670e9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/be5004395dfd0b6ec310db359f887fa396fd0dd2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a9f8a0837f7e0e3870911f2decabb293f6946d708c7e56061dcb9ddd59ec4b6b · sha256:30b72e110c11d502… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer