Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-63906

usb: musb: omap2430: Fix use-after-free in omap2430_probe()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 22b60658a90260e3fbd57824e3afe5682c6afcf5 to < 632fd888fe33083927e29ef651ac1aba345edd9eaffected
  • ffbe2feac59b37c8dc536727552b4f375e1b9aec to < b987f380620b38c84f054d5ff5c05861a7c2203baffected
  • ffbe2feac59b37c8dc536727552b4f375e1b9aec to < 27e62532228dc42367bb43ebbcd7bf49d8db2b0daffected
  • ffbe2feac59b37c8dc536727552b4f375e1b9aec to < 69f9f2b30af03d9b6e83f78fb0f734b6066d4678affected
  • ffbe2feac59b37c8dc536727552b4f375e1b9aec to < d53e4c41331f57b9fd78cbf3e480c6ce20aea07baffected
  • ffbe2feac59b37c8dc536727552b4f375e1b9aec to < e194ce048f5a6c549b3a23a8c568c6470f40f772affected
  • fed43efc00ba6ac8c6b95828cd5acfa3d45eca4daffected
  • 6.1.2 to < 6.1.176affected
  • 6.0.16 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.1.176 to ≤ 6.1.*unaffected
  • 6.6.143 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References