In the Linux kernel, the following vulnerability has been resolved:

usb: mtu3: unmap request DMA on queue failure

mtu3_gadget_queue() maps the request before checking whether
the QMU GPD ring can accept another transfer. the request is
returned with -EAGAIN before it is linked on the endpoint
request list if mtu3_prepare_transfer() fails.

Normal completion and dequeue paths unmap requests from
mtu3_req_complete(), but this error path never reaches that
helper, so the DMA mapping is left active. Unmap the request
before returning from the failed queue path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
df2069acb00569a6299d6e11aa1865eeba463848 affected < 3cee30f1138281a1d247bb053a1ad4f7c5b04e98
df2069acb00569a6299d6e11aa1865eeba463848 affected < f3c4026524d3660c73ef2838b99776d37631e039
df2069acb00569a6299d6e11aa1865eeba463848 affected < e8f739a3860d043dcc135371637e82f53132efe5
df2069acb00569a6299d6e11aa1865eeba463848 affected < 4183874b7925f4a98b400cf857bea26ee87da236
df2069acb00569a6299d6e11aa1865eeba463848 affected < 00c3fef4c2dc2c7cbd8281f8fda09d1913420f09
df2069acb00569a6299d6e11aa1865eeba463848 affected < 8c29d9cfab1c3cf0d0b7fcdf9255597be30aa3e1
df2069acb00569a6299d6e11aa1865eeba463848 affected < 835b0596d4c9bdef93f842d8f826978fb4956b74
df2069acb00569a6299d6e11aa1865eeba463848 affected < 0bddda5a11665c210339de76d27ebbd1a2e0b43c
Linux Linux affected
Version Status Constraints
4.10 affected —
0 unaffected < 4.10
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/00c3fef4c2dc2c7cbd8281f8fda09d1913420f09 cve-icon
https://git.kernel.org/stable/c/0bddda5a11665c210339de76d27ebbd1a2e0b43c cve-icon
https://git.kernel.org/stable/c/3cee30f1138281a1d247bb053a1ad4f7c5b04e98 cve-icon
https://git.kernel.org/stable/c/4183874b7925f4a98b400cf857bea26ee87da236 cve-icon
https://git.kernel.org/stable/c/835b0596d4c9bdef93f842d8f826978fb4956b74 cve-icon
https://git.kernel.org/stable/c/8c29d9cfab1c3cf0d0b7fcdf9255597be30aa3e1 cve-icon
https://git.kernel.org/stable/c/e8f739a3860d043dcc135371637e82f53132efe5 cve-icon
https://git.kernel.org/stable/c/f3c4026524d3660c73ef2838b99776d37631e039 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: mtu3: unmap request DMA on queue failure mtu3_gadget_queue() maps the request before checking whether the QMU GPD ring can accept another transfer. the request is returned with -EAGAIN before it is linked on the endpoint request list if mtu3_prepare_transfer() fails. Normal completion and dequeue paths unmap requests from mtu3_req_complete(), but this error path never reaches that helper, so the DMA mapping is left active. Unmap the request before returning from the failed queue path.
Title usb: mtu3: unmap request DMA on queue failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:02.066Z

Reserved: 2026-07-19T15:36:31.781Z

Link: CVE-2026-64337

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-25T15:45:05Z

Weaknesses

No weakness.