USB Driver Vulnerability in Linux Kernel Affecting Device Management

CVE-2026-46228

What is CVE-2026-46228?

A vulnerability in the USB drivers of the Linux kernel has been identified that affects the proper management of device resources. Specifically, the issue resides in how USB drivers bind to USB interfaces and manage their allocated resources. When a driver is unbound from its associated device without the device being disconnected, it can lead to memory leaks and other resource mismanagement. This situation arises from incorrect lifetime management of the SPI controller and driver data under USB interfaces, particularly during scenarios such as probe deferral or configuration changes. The fix ensures that these resources are properly released upon driver unbinding, thereby enhancing overall system stability and performance.

References