UBUNTU-CVE-2026-80826

    Dashboard / Vulnerabilities / UBUNTU-CVE-2026-80826

    UBUNTU-CVE-2026-80826

    Published: 4 Sept 2026Last Modified: 25 Sept 2026
    Upstream:
    CVE-2026-80826

    Summary:

    Details: In the Linux kernel, the following vulnerability has been resolved: USB: c67x00: fix use-after-free in c67x00_add_iso_urb() When TD creation fails for the last packet of an isochronous URB, c67x00_add_iso_urb() gives the URB back before updating the endpoint scheduling state. c67x00_giveback_urb() frees the URB private data, and the completion callback may release the final URB reference. The following accesses to urbp->ep_data, urb->interval, and urbp->cnt can therefore use freed memory. Update next_frame and cnt before giving back the failed final packet, making the giveback the last operation that uses the URB and its private data.

    References: https://ubuntu.com/security/CVE-2026-80826, https://www.cve.org/CVERecord?id=CVE-2026-80826, https://git.kernel.org/linus/b1e24de475bf2d66fffc9103f3444b783527d55a

    Affected packages

    Package

    Name: linux

    Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Ftrusty

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    3.11.0-12.19

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2026-80826 | CVE-DB