CVE-2026-68374
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
18/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
usb: core: sysfs: add lock to bos_descriptors_read()<br />
<br />
Add a lock to the function bos_descriptors_read().<br />
<br />
This function accesses udev->bos, which could be simultaneously freed in<br />
usb_reset_and_verify_device(), a function that is commonly called in<br />
drivers all over the kernel.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH