Answer in brief
CVE-2026-64350 records a Unknown severity vulnerability in usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-64350 records a Unknown severity vulnerability in usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3d82904559f4f5a2622db1b21de3edf2eded7664 <37283f5a47127fbdea567749a2110766af53d18d || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <cb8e9391b7f4f77d112c51910cd7c355a337ef76 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <fde3c095e1d48e0ac3ab8bc32905da42fe58a36a || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <d9643bbe93a6aee24edee1a86e0303aa74bcd320 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <c00826e87bb75e14e0381b05da5f18ffd0241ab6 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <963075c4da0cd43b3d17b107c355e1eb0ee64a58 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 | 37283f5a47127fbdea567749a2110766af53d18d, cb8e9391b7f4f77d112c51910cd7c355a337ef76, fde3c095e1d48e0ac3ab8bc32905da42fe58a36a, d9643bbe93a6aee24edee1a86e0303aa74bcd320, c00826e87bb75e14e0381b05da5f18ffd0241ab6, 963075c4da0cd43b3d17b107c355e1eb0ee64a58, 3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 |
| Linux/Linuxgeneric | 5.12 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated. Free the stream context array before falling through to the stream_rings cleanup path.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3d82904559f4f5a2622db1b21de3edf2eded7664 <37283f5a47127fbdea567749a2110766af53d18d || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <cb8e9391b7f4f77d112c51910cd7c355a337ef76 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <fde3c095e1d48e0ac3ab8bc32905da42fe58a36a || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <d9643bbe93a6aee24edee1a86e0303aa74bcd320 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <c00826e87bb75e14e0381b05da5f18ffd0241ab6 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <963075c4da0cd43b3d17b107c355e1eb0ee64a58 || >=3d82904559f4f5a2622db1b21de3edf2eded7664 <3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 | 37283f5a47127fbdea567749a2110766af53d18d, cb8e9391b7f4f77d112c51910cd7c355a337ef76, fde3c095e1d48e0ac3ab8bc32905da42fe58a36a, d9643bbe93a6aee24edee1a86e0303aa74bcd320, c00826e87bb75e14e0381b05da5f18ffd0241ab6, 963075c4da0cd43b3d17b107c355e1eb0ee64a58, 3348f444a4ce43dd5c2d1aa41634cb6eff33aa64 |
| Linux/Linuxgeneric | 5.12 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 17, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream mapping update fails, the error path frees the allocated stream rings and stream_rings array, but leaves stream_ctx_array allocated. Free the stream context array before falling through to the stream_rings cleanup path.
Quoted source text, attributed separately from HOL analysis.