CVE-2026-63906

Updated on 19 Jul 2026

Severity

8.4 High severity

Details

CVSS score
8.4

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: omap2430: Fix use-after-free in omap2430_probe()

In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node’s reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 12 Planned