All vulnerabilities

Servers and applications

CVE-2026-98767

usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Severity
Unrated
Published
18 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
6.1.191, 6.6.160, 6.12.113, 6.15, 6.18.56, 7.2.10
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.10
  • From 6.15 before 5.15.224
  • From 6.14.5 before 6.15
  • From 6.13 before 6.18.56
All 13 release lines
  • From 5.4.293 before 5.5
  • From 5.10.237 before 5.11
  • From 5.15.181 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.1.136 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.6.89 before 6.6.160
  • From 6.7 before 6.12.113
  • From 6.12.26 before 6.12.113
  • From 6.13 before 6.18.56
  • From 6.14.5 before 6.15
  • From 6.15 before 5.15.224
  • From 6.19 before 7.2.10

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98767