Answer in brief
CVE-2026-23108 records a Unknown severity vulnerability in can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 3.9 | Not reported |
| Linux/Linuxgeneric | >=0024d8ad1639e32d717445c69ca813fd19c2a91c <feb8243eaea7efd5279b19667d7189fd8654c87a || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <ef6e608e5ee71eca0cd3475c737e684cef24f240 || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <60719661b4cbd7ffbed1a0e0fa3bbc82d8bd2be9 || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <59ff56992bba28051ad67cd8cc7b0edfe7280796 || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <ea4a98e924164586066b39f29bfcc7cc9da108cd || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <07e9373739c6388af9d99797cdb2e79dbbcbe92b || >=0024d8ad1639e32d717445c69ca813fd19c2a91c <f7a980b3b8f80fe367f679da376cf76e800f9480 | feb8243eaea7efd5279b19667d7189fd8654c87a, ef6e608e5ee71eca0cd3475c737e684cef24f240, 60719661b4cbd7ffbed1a0e0fa3bbc82d8bd2be9, 59ff56992bba28051ad67cd8cc7b0edfe7280796, ea4a98e924164586066b39f29bfcc7cc9da108cd, 07e9373739c6388af9d99797cdb2e79dbbcbe92b, f7a980b3b8f80fe367f679da376cf76e800f9480 |
Published upstream
Feb 4, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 19, 2026
In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In usb_8dev_open() -> usb_8dev_start(), the URBs for USB-in transfers are allocated, added to the priv->rx_submitted anchor and submitted. In the complete callback usb_8dev_read_bulk_callback(), the URBs are processed and resubmitted. In usb_8dev_close() -> unlink_all_urbs() the URBs are freed by calling usb_kill_anchored_urbs(&priv->rx_submitted). However, this does not take into account that the USB framework unanchors the URB before the complete function is called. This means that once an in-URB has been completed, it is no longer anchored and is ultimately not released in usb_kill_anchored_urbs(). Fix the memory leak by anchoring the URB in the usb_8dev_read_bulk_callback() to the priv->rx_submitted anchor.
Quoted source text, attributed separately from HOL analysis.