CVE-2026-64347 | Linux Kernel up to 7.2-rc2 USB DT OTG composite_setup buffer overflow

July 25, 2026 Yanac

A vulnerability was found in Linux Kernel up to 7.2-rc2. It has been declared as critical. This vulnerability affects the function composite_setup of the component USB DT OTG Handler. Such manipulation leads to buffer overflow.

This vulnerability is traded as CVE-2026-64347. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More