CVE-2026-23108: can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
In the Linux kernel, the following vulnerability has been resolved:
can: usb8dev: usb8devreadbulkcallback(): fix URB memory leak
Fix similar memory leak as in commit 7352e1d5932a ("can: gsusb: gsusbreceivebulkcallback(): fix URB memory leak").
In usb8devopen() -> usb8devstart(), the URBs for USB-in transfers are allocated, added to the priv->rxsubmitted anchor and submitted. In the complete callback usb8devreadbulkcallback(), the URBs are processed and resubmitted. In usb8devclose() -> unlinkallurbs() the URBs are freed by calling usbkillanchoredurbs(&priv->rxsubmitted).
However, this does not take into account that the USB framework unanchors the URB before the complete function is called. This means that once an in-URB has been completed, it is no longer anchored and is ultimately not released in usbkillanchoredurbs().
Fix the memory leak by anchoring the URB in the usb8devreadbulkcallback() to the priv->rxsubmitted anchor.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23108?
The severity of CVE-2026-23108 is classified as moderate due to potential memory leaks impacting system performance.
How do I fix CVE-2026-23108?
To fix CVE-2026-23108, update your Linux kernel to a version where this vulnerability has been patched.
Which versions of the Linux kernel are affected by CVE-2026-23108?
CVE-2026-23108 affects certain versions of the Linux kernel prior to the security patch release.
What is the impact of CVE-2026-23108 exploitation?
Exploitation of CVE-2026-23108 may lead to increased memory consumption and degrade system performance.
Is CVE-2026-23108 related to USB devices?
Yes, CVE-2026-23108 specifically concerns a vulnerability in the USB device driver functionality of the Linux kernel.