CVE-2026-64341
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
USB: iowarrior: fix use-after-free on disconnect race<br />
<br />
mutex_unlock() may access the mutex structure after releasing the lock<br />
and therefore cannot be used to manage lifetime of objects directly<br />
(unlike spinlocks and refcounts). [1][2]<br />
<br />
Use a kref to release the driver data to avoid use-after-free in<br />
mutex_unlock() when release() races with disconnect().<br />
<br />
[1] a51749ab34d9 ("locking/mutex: Document that mutex_unlock() is non-atomic")<br />
[2] 2b9d9e0a9ba0 ("locking/mutex: Clarify that mutex_unlock(), and most<br />
other sleeping locks, can still use the lock object<br />
after it&#39;s unlocked")



