CVE-2026-85032 | ZephyrProject Zephyr up to 4.4.x MCTP mctp_usb.c mctp_usb_class_disable use after free

A vulnerability was found in ZephyrProject Zephyr up to 4.4.x and classified as critical. This issue affects the function mctp_usb_class_disable of the file subsys/pmci/mctp/mctp_usb.c of the component MCTP. Such manipulation leads to use after free.

This vulnerability is referenced as CVE-2026-85032. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More