CVE-2026-64338

USB: misc: uss720: unregister parport on probe failure

MEDIUM
5.5
CVSS Score
Published: July 25, 2026 at 08:50 AM UTC
Updated: September 3, 2026 at 04:24 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM5.5
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get_1284_register() fails, the error path drops the driver private data and the USB device reference, but leaves the parport device registered. Leaving the port registered is more than a private allocation leak: parport_register_port() has already reserved a parport number and registered the parport bus device, while pp->private_data still points at the private data that the common error path is about to release. Undo the pre-announce registration in the get_1284_register() failure branch before jumping to the common private-data cleanup path. Clear priv->pp first, matching the disconnect path and avoiding a stale pointer in the private data. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 4.19.317v ≥ 5.4.279v ≥ 6.9.74.19.317 ≤ v < 4.205.10.221 ≤ v < 5.10.2615.15.162 ≤ v < 5.15.2125.4.279 ≤ v < 5.56.1.96 ≤ v < 6.1.1786.10 ≤ v < 6.12.966.10 ≤ v < 6.18.396.10 ≤ v < 7.1.46.10 ≤ v < 7.26.13 ≤ v < 6.18.396.19 ≤ v < 7.1.46.6.36 ≤ v < 6.6.1456.9.7 ≤ v < 6.106.9.7 ≤ v < 6.12.9610132ccf99f49b43aeb7470df50d72344a601ad62d13616ca30014ed96302e51a5b0e17664e58bc3295f1b866bfbcabd625511968e8a5c541f9ab324.19.3174736c1bc32197f7d859e1a96ae80a16659931d489d77fbd66375972a380d207f7eb39b00c4a67b4eaf2331a77996bbbaf2b824d452ac8ebda7e6e75.10.2215.15.1625.4.2796.1.966.6.366.9.77.2 rc17.2 rc28fc246a8a456679993df565d3c9e3da28030ee43dff3b01e91a3df93063b03d0f8dd5c40546687ec
Vendor states this is fixed in 0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea (fixed)
Vendor states this is fixed in 1712fd71a5aaf81e47c747f180535fa963ad7830 (fixed)
Vendor states this is fixed in 48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e (fixed)
Vendor states this is fixed in 5e62d7857fd51b908b8371062ee839739a086bbe (fixed)
Vendor states this is fixed in 6bbb98bec71b577fda4f4b48f7aea5874b04a576 (fixed)
Vendor states this is fixed in 729b68a5bad71220ae0914c8bdab9488ad5be6c8 (fixed)
Vendor states this is fixed in 93563243377f8e9b46cc94d9c4f06533dd31b141 (fixed)
Vendor states this is fixed in b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3 (fixed)
Affected range stops below 4.20, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 5.10.261 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Affected range stops below 5.5, so it looks safe — our inference, not a vendor statement
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.10 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

CVSS

Attack Vector
LOCAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card