In the Linux kernel, the following vulnerability has been resolved:

usb: musb: omap2430: Fix use-after-free in omap2430_probe()

In omap2430_probe(), of_node_put(np) is called prematurely before the
last access to np, leading to a use-after-free if the node's reference
count drops to zero. Move the of_node_put() calls after the last use of
np in both the success and error paths.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00205.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
22b60658a90260e3fbd57824e3afe5682c6afcf5 affected < 632fd888fe33083927e29ef651ac1aba345edd9e
ffbe2feac59b37c8dc536727552b4f375e1b9aec affected < b987f380620b38c84f054d5ff5c05861a7c2203b
ffbe2feac59b37c8dc536727552b4f375e1b9aec affected < 27e62532228dc42367bb43ebbcd7bf49d8db2b0d
ffbe2feac59b37c8dc536727552b4f375e1b9aec affected < 69f9f2b30af03d9b6e83f78fb0f734b6066d4678
ffbe2feac59b37c8dc536727552b4f375e1b9aec affected < d53e4c41331f57b9fd78cbf3e480c6ce20aea07b
ffbe2feac59b37c8dc536727552b4f375e1b9aec affected < e194ce048f5a6c549b3a23a8c568c6470f40f772
fed43efc00ba6ac8c6b95828cd5acfa3d45eca4d affected —
6.1.2 affected < 6.1.176
6.0.16 affected < 6.1
Linux Linux affected
Version Status Constraints
6.2 affected —
0 unaffected < 6.2
6.1.176 unaffected ≤ 6.1.*
6.6.143 unaffected ≤ 6.6.*
6.12.93 unaffected ≤ 6.12.*
6.18.35 unaffected ≤ 6.18.*
7.0.12 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/27e62532228dc42367bb43ebbcd7bf49d8db2b0d cve-icon
https://git.kernel.org/stable/c/632fd888fe33083927e29ef651ac1aba345edd9e cve-icon
https://git.kernel.org/stable/c/69f9f2b30af03d9b6e83f78fb0f734b6066d4678 cve-icon
https://git.kernel.org/stable/c/b987f380620b38c84f054d5ff5c05861a7c2203b cve-icon
https://git.kernel.org/stable/c/d53e4c41331f57b9fd78cbf3e480c6ce20aea07b cve-icon
https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772 cve-icon
History

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.
Title usb: musb: omap2430: Fix use-after-free in omap2430_probe()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:41:18.250Z

Reserved: 2026-07-19T07:54:57.020Z

Link: CVE-2026-63906

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-21T06:30:02Z

Weaknesses

No weakness.