Concurrency issue in the Linux kernel affecting USB gadget configurations

CVE-2026-64233

What is CVE-2026-64233?

A concurrency issue in the Linux kernel's USB gadget functionality affects how uvc_function_bind() handles extension units. This vulnerability arises from the lack of proper locking during descriptor fixes, allowing a scenario where privileged users can exploit race conditions. Specifically, if a process maliciously holds a configfs subtree open while altering device configurations, it can lead to dereferencing a freed structure, potentially resulting in unpredictable behaviors. The fix aims to ensure consistent locking across all related operations to maintain system integrity.

References