{"id":"CVE-2026-63927","title":"usb: dwc2: Fix use after free in debug code","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: Fix use after free in debug code\n\nWe're not allowed to dereference \"urb\" after calling\nusb_hcd_giveback_urb() so save the urb->status ahead of time.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < d5fc183ed614aeba6779cc992325be560f9a4451","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 63b0dafa676aad4d0c3f01a61ad8e2990907660c","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 0584af4fe40fa5e254a05d69ce658746de641708","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < a15eeeceb94cbc04edef395e4d777ff554bdc27d","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 84ea928ed584756e59c6ac09736f12d1db95ded0","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 6d0b79d1d1118145e48a68192b6d733e39387053","Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9ea06a3fbf9f16e0d98c52cb3b99642be15ec281","Linux 3.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:33:40.424795Z"},"published":"2026-07-19","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:42:12.768Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63927","references":[{"url":"https://git.kernel.org/stable/c/d5fc183ed614aeba6779cc992325be560f9a4451"},{"url":"https://git.kernel.org/stable/c/63b0dafa676aad4d0c3f01a61ad8e2990907660c"},{"url":"https://git.kernel.org/stable/c/9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913"},{"url":"https://git.kernel.org/stable/c/0584af4fe40fa5e254a05d69ce658746de641708"},{"url":"https://git.kernel.org/stable/c/a15eeeceb94cbc04edef395e4d777ff554bdc27d"},{"url":"https://git.kernel.org/stable/c/84ea928ed584756e59c6ac09736f12d1db95ded0"},{"url":"https://git.kernel.org/stable/c/6d0b79d1d1118145e48a68192b6d733e39387053"},{"url":"https://git.kernel.org/stable/c/9ea06a3fbf9f16e0d98c52cb3b99642be15ec281"}],"tags":["cve.org"],"epss":0.00164,"epssPercentile":0.05237,"ingestedAt":"2026-10-16T17:24:46.778Z","slug":"CVE-2026-63927","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: Fix use after free in debug code\n\nWe're not allowed to dereference \"urb\" after calling\nusb_hcd_giveback_urb() so save the urb->status ahead of time.\n\n## Affected\n\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < d5fc183ed614aeba6779cc992325be560f9a4451`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 63b0dafa676aad4d0c3f01a61ad8e2990907660c`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 0584af4fe40fa5e254a05d69ce658746de641708`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < a15eeeceb94cbc04edef395e4d777ff554bdc27d`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 84ea928ed584756e59c6ac09736f12d1db95ded0`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 6d0b79d1d1118145e48a68192b6d733e39387053`\n- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9ea06a3fbf9f16e0d98c52cb3b99642be15ec281`\n- `Linux 3.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}