Use-After-Free Vulnerability in Linux Kernel Affecting Vub300 Driver

CVE-2026-31650

What is CVE-2026-31650?

A vulnerability within the Linux kernel's vub300 driver has been identified, which can lead to a use-after-free situation upon disconnecting the device. This flaw emerges from the incorrect management of reference counts for the controller, allowing the last reference to be dropped after unbinding the driver. As a result, memory that is still in use may inadvertently be released, leading to potential memory leaks. Additionally, the current lifetime management of the controller is tied incorrectly to the parent USB device rather than to the interface itself. This misconfiguration can create instability, particularly if the driver is unbound without physically disconnecting the device. Addressing this issue necessitates returning to non-managed memory allocation for the controller.

References