---
id: CVE-2026-63927
title: 'usb: dwc2: Fix use after free in debug code'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  usb: dwc2: Fix use after free in debug code

  We're not allowed to dereference "urb" after calling
  usb_hcd_giveback_urb() so save the urb->status ahead of time.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    d5fc183ed614aeba6779cc992325be560f9a4451
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    63b0dafa676aad4d0c3f01a61ad8e2990907660c
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    0584af4fe40fa5e254a05d69ce658746de641708
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    a15eeeceb94cbc04edef395e4d777ff554bdc27d
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    84ea928ed584756e59c6ac09736f12d1db95ded0
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    6d0b79d1d1118145e48a68192b6d733e39387053
  - >-
    Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c <
    9ea06a3fbf9f16e0d98c52cb3b99642be15ec281
  - Linux 3.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:33:40.424795Z'
published: '2026-07-19'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:42:12.768Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-63927'
references:
  - url: 'https://git.kernel.org/stable/c/d5fc183ed614aeba6779cc992325be560f9a4451'
  - url: 'https://git.kernel.org/stable/c/63b0dafa676aad4d0c3f01a61ad8e2990907660c'
  - url: 'https://git.kernel.org/stable/c/9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913'
  - url: 'https://git.kernel.org/stable/c/0584af4fe40fa5e254a05d69ce658746de641708'
  - url: 'https://git.kernel.org/stable/c/a15eeeceb94cbc04edef395e4d777ff554bdc27d'
  - url: 'https://git.kernel.org/stable/c/84ea928ed584756e59c6ac09736f12d1db95ded0'
  - url: 'https://git.kernel.org/stable/c/6d0b79d1d1118145e48a68192b6d733e39387053'
  - url: 'https://git.kernel.org/stable/c/9ea06a3fbf9f16e0d98c52cb3b99642be15ec281'
tags:
  - cve.org
epss: 0.00164
epssPercentile: 0.05237
ingestedAt: '2026-10-16T17:24:46.778Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: Fix use after free in debug code

We're not allowed to dereference "urb" after calling
usb_hcd_giveback_urb() so save the urb->status ahead of time.

## Affected

- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < d5fc183ed614aeba6779cc992325be560f9a4451`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 63b0dafa676aad4d0c3f01a61ad8e2990907660c`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9fe1d84f7e2cf33634e8afb7f4b7f8de182dd913`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 0584af4fe40fa5e254a05d69ce658746de641708`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < a15eeeceb94cbc04edef395e4d777ff554bdc27d`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 84ea928ed584756e59c6ac09736f12d1db95ded0`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 6d0b79d1d1118145e48a68192b6d733e39387053`
- `Linux >= 7359d482eb4d3967cc8be354405ae6be6eaf732c < 9ea06a3fbf9f16e0d98c52cb3b99642be15ec281`
- `Linux 3.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.