CVE-2026-68374 | Linux Kernel up to 6.12.100/6.18.41/7.1.5/7.2-rc4 sysfs drivers/usb/core/sysfs.c bos_descriptors_read use after free

A vulnerability was found in Linux Kernel up to 6.12.100/6.18.41/7.1.5/7.2-rc4. It has been classified as very critical. This affects the function bos_descriptors_read of the file drivers/usb/core/sysfs.c of the component sysfs. The manipulation leads to use after free.

This vulnerability is documented as CVE-2026-68374. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More