CVE-2026-74459: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure
In the Linux kernel, the following vulnerability has been resolved:
can: etases58x: es58xreadbulkcallback(): fix RX buffer leak on URB resubmit failure
es58xreadbulkcallback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and will be handled by the normal RX path or by teardown.
However, if usbsubmiturb() fails, the callback unanchors the URB and then returns directly. This skips the existing freeurb path, so the coherent transfer buffer allocated with usballoccoherent() is not released.
Reuse the existing freeurb path after a resubmit failure so that the RX coherent buffer is freed before leaving the callback.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74459?
CVE-2026-74459 has a risk rating of 15.
How do I fix CVE-2026-74459?
To fix CVE-2026-74459, update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What system is affected by CVE-2026-74459?
CVE-2026-74459 affects the Linux kernel, particularly the can: etas_es58x module.
What is the impact of CVE-2026-74459?
The impact of CVE-2026-74459 includes a potential RX buffer leak on URB resubmit failure.
When was CVE-2026-74459 published?
CVE-2026-74459 was published on August 15, 2026.