CVE-2026-64350

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()

cdnsp_alloc_stream_info() allocates stream_info->stream_ctx_array with

cdnsp_alloc_stream_ctx(). If a later stream ring allocation or stream

mapping update fails, the error path frees the allocated stream rings

and stream_rings array, but leaves stream_ctx_array allocated.

Free the stream context array before falling through to the stream_rings

cleanup path.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References