In the Linux kernel, the following vulnerability has been resolved:

usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with
cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream
mapping update fails, the error path frees the allocated stream rings
and stream_rings array, but leaves stream_ctx_array allocated.

Free the stream context array before falling through to the stream_rings
cleanup path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < 37283f5a47127fbdea567749a2110766af53d18d
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < cb8e9391b7f4f77d112c51910cd7c355a337ef76
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < fde3c095e1d48e0ac3ab8bc32905da42fe58a36a
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < d9643bbe93a6aee24edee1a86e0303aa74bcd320
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < c00826e87bb75e14e0381b05da5f18ffd0241ab6
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < 963075c4da0cd43b3d17b107c355e1eb0ee64a58
3d82904559f4f5a2622db1b21de3edf2eded7664 affected < 3348f444a4ce43dd5c2d1aa41634cb6eff33aa64
Linux Linux affected
Version Status Constraints
5.12 affected —
0 unaffected < 5.12
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 cve-icon
https://git.kernel.org/stable/c/37283f5a47127fbdea567749a2110766af53d18d cve-icon
https://git.kernel.org/stable/c/963075c4da0cd43b3d17b107c355e1eb0ee64a58 cve-icon
https://git.kernel.org/stable/c/c00826e87bb75e14e0381b05da5f18ffd0241ab6 cve-icon
https://git.kernel.org/stable/c/cb8e9391b7f4f77d112c51910cd7c355a337ef76 cve-icon
https://git.kernel.org/stable/c/d9643bbe93a6aee24edee1a86e0303aa74bcd320 cve-icon
https://git.kernel.org/stable/c/fde3c095e1d48e0ac3ab8bc32905da42fe58a36a cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated. Free the stream context array before falling through to the stream_rings cleanup path.
Title usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:10.270Z

Reserved: 2026-07-19T15:36:31.782Z

Link: CVE-2026-64350

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-25T16:30:06Z

Weaknesses

No weakness.