Security Advisory

CVE-2026-63906

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-19 14:55:12
Last updated 2026-07-20 13:41:18
Assigner Linux
CVSS score 8.4
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.