In the Linux kernel, the following vulnerability has been resolved:
usb: mtu3: unmap request DMA on queue failure
mtu3_gadget_queue() maps the request before checking whether the QMU GPD ring can accept another transfer. the request is returned with -EAGAIN before it is linked on the endpoint request list if mtu3_prepare_transfer() fails.
Normal completion and dequeue paths unmap requests from mtu3_req_complete(), but this error path never reaches that helper, so the DMA mapping is left active. Unmap the request before returning from the failed queue path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux-6.12Upgrade linux | Jul 28, 2026 | Jul 28, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-aws-7.0Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-7.0.0-31-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-generic-7.0Upgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-26.04bUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-oem-26.04a | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 3, 2026 | Jul 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub