CVE-2026-64327

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: gadget: f_fs: Initialize epfile-&gt;in early to fix endpoint direction checks<br /> <br /> When parsing endpoint descriptors, ffs_data_got_descs() generates the<br /> eps_addrmap which contains the endpoint direction. However, epfile-&gt;in<br /> was previously only populated in ffs_func_eps_enable() which executes<br /> upon USB host connection. As a result, early userspace ioctls like<br /> FUNCTIONFS_DMABUF_ATTACH that run before the host connects would see<br /> epfile-&gt;in as 0, leading to incorrect DMA directions.<br /> <br /> By moving the initialization to ffs_epfiles_create(), epfile-&gt;in is<br /> accurate before userspace opens the endpoint files.