| Name | CVE-2026-64332 |
| Description | In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference whenever registration fails. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DLA-4717-1, DLA-4720-1, DLA-4723-1, DLA-4724-1 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| linux (PTS) | bullseye | 5.10.223-1 | vulnerable |
| bullseye (security) | 5.10.262-1 | fixed | |
| bookworm | 6.1.176-1 | vulnerable | |
| bookworm (security) | 6.1.180-1 | fixed | |
| trixie | 6.12.94-1 | vulnerable | |
| trixie (security) | 6.12.101-1 | fixed | |
| forky | 7.1.7-1 | fixed | |
| sid | 7.1.8-1 | fixed | |
| linux-6.1 (PTS) | bullseye (security) | 6.1.180-1~deb11u1 | fixed |
| linux-6.12 (PTS) | bookworm (security) | 6.12.100-1~deb12u1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| linux | source | bullseye | 5.10.262-1 | DLA-4717-1 | ||
| linux | source | bookworm | 6.1.180-1 | DLA-4720-1 | ||
| linux | source | trixie | 6.12.96-1 | |||
| linux | source | (unstable) | 7.1.4-1 | |||
| linux-6.1 | source | bullseye | 6.1.180-1~deb11u1 | DLA-4723-1 | ||
| linux-6.12 | source | bookworm | 6.12.100-1~deb12u1 | DLA-4724-1 |
https://git.kernel.org/linus/8af6812795869a66e9b26044f455b13deecdb69c (7.2-rc3)