OCTOBER 22, 2026
Live Feed
Back to database
Case File

CVE-2026-64332

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's USB ULPI driver, where a memory leak occurs during early device registration failures due to the allocated device name not being freed. This can lead to increased memory consumption, potentially impacting system stability over time. System administrators and developers working with Linux kernel implementations should prioritize addressing this issue to maintain optimal performance and resource management.

CVE
CVE-2026-64332
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference whenever registration fails.