CVE-2026-98762
In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2_wakeup_detected() accesses …
Impact
In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2_wakeup_detected() accesses the DWC2 host state and can rearm the wakeup timer. dwc2_hcd_free() currently deletes the timer only after freeing host-owned state, and timer_delete() does not synchronize a callback or prevent it from being queued again. Stop and shut down the timer in dwc2_hcd_release(), before the HCD resources are freed. This covers both the HCD initialization error path and normal HCD removal.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
References
- NVD record
- CVE.org record
- https://git.kernel.org/stable/c/0b2ea59d66d046d5601ffc3e61dd09d3597c704e
- https://git.kernel.org/stable/c/4333174ea52c863a50bb3e0a4726bf9f7cdf7524
- https://git.kernel.org/stable/c/441be312fce927443eae2821f502344d953c38bb
- https://git.kernel.org/stable/c/79ba37dd38a321cb32a79332a3e3c68dd334dca9
- https://git.kernel.org/stable/c/82cc242da6d621752718929e6a2fa6f9554ebffe
- https://git.kernel.org/stable/c/f3d76baa5b902f681100447e9d185819c5c1316d
- https://git.kernel.org/stable/c/fd772af9512cdecb83de34a461801533828e77fd