CVE-2026-31758

In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release When calling usbtmc_release, pending anchored URBs must be flushed or killed to prevent use-after-free errors (e.g. in the HCD giveback path). Call usbtmc_draw_down() to allow anchored URBs to be completed.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-25)

CWE

CWE-416

Published

2026-05-01

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• linux:linux_kernel

References

• https://git.kernel.org/stable/c/7fa8f61bab3fb75b5deba8a0f3abb74dc5068d9f
• https://git.kernel.org/stable/c/8a768552f7a8276fb9e01d49773d2094ace7c8f1
• https://git.kernel.org/stable/c/959ef329071136e4335b54822fe2f607659b4569
• https://git.kernel.org/stable/c/95e09b07e50290254b28b8395509473104518f8c
• https://git.kernel.org/stable/c/977b632db51d231dec0bc571089a5c2402674139

Check your stackJSON