CVE-2026-98762

Published: Ott 18, 2026 Last Modified: Ott 19, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

USB: dwc2: shut down wakeup timer before freeing HCD state

dwc2_wakeup_detected() accesses the DWC2 host state and can rearm the
wakeup timer. dwc2_hcd_free() currently deletes the timer only after
freeing host-owned state, and timer_delete() does not synchronize a
callback or prevent it from being queued again.

Stop and shut down the timer in dwc2_hcd_release(), before the HCD
resources are freed. This covers both the HCD initialization error path
and normal HCD removal.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0017
Percentile
0,1th
Updated

EPSS Score Trend (Last 2 Days)

https://git.kernel.org/stable/c/4333174ea52c863a50bb3e0a4726bf9f7cdf7524
https://git.kernel.org/stable/c/441be312fce927443eae2821f502344d953c38bb
https://git.kernel.org/stable/c/79ba37dd38a321cb32a79332a3e3c68dd334dca9
https://git.kernel.org/stable/c/fd772af9512cdecb83de34a461801533828e77fd