CVE-2026-31758
In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Flush anchored URBs in usbtmc_release When calling usbtmc_release, pending anchored URBs must be flushed or killed to prevent use-after-free errors (e.g. in the HCD giveback path). Call usbtmc_draw_down() to allow anchored URBs to be completed.
- Published May 1, 2026
- CVSS 7.8 high
- 0.2% chance of exploitation in the next 30 days (EPSS)
- A fix is available