SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-74459

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of USB receive buffers in the etas_es58x driver, specifically during the resubmission of URBs (USB Request Blocks) after a failure. If the resubmission fails, the allocated coherent transfer buffer is not properly released, leading to a potential memory leak. Organizations utilizing Linux systems with this driver should prioritize remediation to prevent resource exhaustion and ensure system stability.

CVE
CVE-2026-74459
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure es58x_read_bulk_callback() resubmits the RX URB after processing a received packet. If the resubmit succeeds, the URB remains anchored and will be handled by the normal RX path or by teardown. However, if usb_submit_urb() fails, the callback unanchors the URB and then returns directly. This skips the existing free_urb path, so the coherent transfer buffer allocated with usb_alloc_coherent() is not released. Reuse the existing free_urb path after a resubmit failure so that the RX coherent buffer is freed before leaving the callback.