CVE-2026-64338

USB: misc: uss720: unregister parport on probe failure

Published Jul 25, 2026 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

USB: misc: uss720: unregister parport on probe failure

uss720_probe() registers a parport before reading the 1284 register used
to detect unsupported Belkin F5U002 adapters. If get_1284_register()
fails, the error path drops the driver private data and the USB device
reference, but leaves the parport device registered.

Leaving the port registered is more than a private allocation leak:
parport_register_port() has already reserved a parport number and
registered the parport bus device, while pp->private_data still points at
the private data that the common error path is about to release.

Undo the pre-announce registration in the get_1284_register() failure
branch before jumping to the common private-data cleanup path. Clear
priv->pp first, matching the disconnect path and avoiding a stale pointer
in the private data.

This issue was identified during our ongoing static-analysis research while
reviewing kernel code.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`04736c1bc32197f7d859e01a96ae80a16659931d`	affected	< 6bbb98bec71b577fda4f4b48f7aea5874b04a576
`4eaf2331a77996bbbaf2b824d452ac8ebda7e6e7`	affected	< 93563243377f8e9b46cc94d9c4f06533dd31b141
`8fc246a8a456679993df565d3c9e3da28030ee43`	affected	< 1712fd71a5aaf81e47c747f180535fa963ad7830
`10132ccf99f49b43aeb7470df50d72344a601ad6`	affected	< 0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea
`3295f1b866bfbcabd625511968e8a5c541f9ab32`	affected	< 5e62d7857fd51b908b8371062ee839739a086bbe
`3295f1b866bfbcabd625511968e8a5c541f9ab32`	affected	< 729b68a5bad71220ae0914c8bdab9488ad5be6c8
`3295f1b866bfbcabd625511968e8a5c541f9ab32`	affected	< 48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e
`3295f1b866bfbcabd625511968e8a5c541f9ab32`	affected	< b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3
`02d13616ca30014ed96302e51a5b0e17664e58bc`	affected	—
`dff3b01e91a3df93063b03d0f8dd5c40546687ec`	affected	—
`489d77fbd66375972a380d207f7eb39b00c4a67b`	affected	—
`5.10.221`	affected	< 5.10.261
`5.15.162`	affected	< 5.15.212
`6.1.96`	affected	< 6.1.178
`6.6.36`	affected	< 6.6.145
`4.19.317`	affected	< 4.20
`5.4.279`	affected	< 5.5
`6.9.7`	affected	< 6.10

Linux

affected

Version	Status	Constraints
`6.10`	affected	—
`0`	unaffected	< 6.10
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.96`	unaffected	≤ 6.12.*
`6.18.39`	unaffected	≤ 6.18.*
`7.1.4`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:7.2:rc1::::::
	cpe:2.3:o:linux:linux_kernel:7.2:rc2::::::

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[04736c1bc32197f7d859e01a96ae80a16659931d,6bbb98bec71b577fda4f4b48f7aea5874b04a576)`	affected	code_commit	—
`[4eaf2331a77996bbbaf2b824d452ac8ebda7e6e7,93563243377f8e9b46cc94d9c4f06533dd31b141)`	affected	code_commit	—
`[8fc246a8a456679993df565d3c9e3da28030ee43,1712fd71a5aaf81e47c747f180535fa963ad7830)`	affected	code_commit	—
`[10132ccf99f49b43aeb7470df50d72344a601ad6,0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea)`	affected	code_commit	—
`[3295f1b866bfbcabd625511968e8a5c541f9ab32,5e62d7857fd51b908b8371062ee839739a086bbe)`	affected	code_commit	—
`[3295f1b866bfbcabd625511968e8a5c541f9ab32,729b68a5bad71220ae0914c8bdab9488ad5be6c8)`	affected	code_commit	—
`[3295f1b866bfbcabd625511968e8a5c541f9ab32,48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e)`	affected	code_commit	—
`[3295f1b866bfbcabd625511968e8a5c541f9ab32,b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3)`	affected	code_commit	—
`02d13616ca30014ed96302e51a5b0e17664e58bc`	affected	code_commit	—
`dff3b01e91a3df93063b03d0f8dd5c40546687ec`	affected	code_commit	—
`489d77fbd66375972a380d207f7eb39b00c4a67b`	affected	code_commit	—
`[5.10.221,5.10.261)`	affected	semver	—
`[5.15.162,5.15.212)`	affected	semver	—
`[6.1.96,6.1.178)`	affected	semver	—
`[6.6.36,6.6.145)`	affected	semver	—
`[4.19.317,4.20)`	affected	semver	—
`[5.4.279,5.5)`	affected	semver	—
`[6.9.7,6.10)`	affected	semver	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`6.10`	affected	semver	—
`[0,6.10)`	unaffected	semver	—
`[5.10.261,5.10.*]`	unaffected	generic	—
`[5.15.212,5.15.*]`	unaffected	generic	—
`[6.1.178,6.1.*]`	unaffected	generic	—
`[6.6.145,6.6.*]`	unaffected	generic	—
`[6.12.96,6.12.*]`	unaffected	generic	—
`[6.18.39,6.18.*]`	unaffected	generic	—
`[7.1.4,7.1.*]`	unaffected	generic	—
`[7.2-rc3,*]`	unaffected	generic	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4717-1	linux security update
Debian DLA	DLA-4720-1	linux security update
Debian DLA	DLA-4723-1	linux-6.1 security update
Debian DLA	DLA-4724-1	linux-6.12 new package
Ubuntu USN	USN-8726-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8727-1	Linux kernel (OEM) vulnerabilities
Ubuntu USN	USN-8728-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8760-1	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-8726-2	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-8726-3	Linux kernel (IBM) vulnerabilities
Ubuntu USN	USN-8800-1	Linux kernel (NVIDIA BaseOS) vulnerabilities
Ubuntu USN	USN-8760-2	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-8726-4	Linux kernel vulnerabilities
Ubuntu USN	USN-8728-2	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-8728-3	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-8876-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-8875-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8877-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8878-1	Linux kernel (GCP) vulnerabilities
Ubuntu USN	USN-8879-1	Linux kernel (Oracle) vulnerabilities
Ubuntu USN	USN-8875-2	Linux kernel (NVIDIA) vulnerabilities
Ubuntu USN	USN-8917-1	Linux kernel vulnerabilities
Ubuntu USN	USN-8918-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9029-1	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.123% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://git.kernel.org/stable/c/0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea
https://git.kernel.org/stable/c/1712fd71a5aaf81e47c747f180535fa963ad7830
https://git.kernel.org/stable/c/48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e
https://git.kernel.org/stable/c/5e62d7857fd51b908b8371062ee839739a086bbe
https://git.kernel.org/stable/c/6bbb98bec71b577fda4f4b48f7aea5874b04a576
https://git.kernel.org/stable/c/729b68a5bad71220ae0914c8bdab9488ad5be6c8
https://git.kernel.org/stable/c/93563243377f8e9b46cc94d9c4f06533dd31b141
https://git.kernel.org/stable/c/b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3
https://lore.kernel.org/linux-cve-announce/2026072515-CVE-2026-64338-97e0@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-64338
https://www.cve.org/CVERecord?id=CVE-2026-64338

History

Nov 7, 2026 7:30 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 3, 2026 4:15 PM Weaknesses updated. Affected versions updated View changes

Type	Values Removed	Values Added
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel:7.2:rc1:::::: cpe:2.3:o:linux:linux_kernel:7.2:rc2::::::

Jul 30, 2026 4:15 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-667 CWE-682

Jul 29, 2026 12:15 PM Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-772
References		https://lore.kernel.org/linux-cve-announce/2026072515-CVE-2026-64338-97e0@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-64338 https://www.cve.org/CVERecord?id=CVE-2026-64338
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Moderate`

Jul 26, 2026 2:30 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-667 CWE-682

Jul 25, 2026 9:30 AM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: USB: misc: uss720: unregister parport on probe failure uss720_probe() registers a parport before reading the 1284 register used to detect unsupported Belkin F5U002 adapters. If get_1284_register() fails, the error path drops the driver private data and the USB device reference, but leaves the parport device registered. Leaving the port registered is more than a private allocation leak: parport_register_port() has already reserved a parport number and registered the parport bus device, while pp->private_data still points at the private data that the common error path is about to release. Undo the pre-announce registration in the get_1284_register() failure branch before jumping to the common private-data cleanup path. Clear priv->pp first, matching the disconnect path and avoiding a stale pointer in the private data. This issue was identified during our ongoing static-analysis research while reviewing kernel code.
Title		USB: misc: uss720: unregister parport on probe failure
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea https://git.kernel.org/stable/c/1712fd71a5aaf81e47c747f180535fa963ad7830 https://git.kernel.org/stable/c/48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e https://git.kernel.org/stable/c/5e62d7857fd51b908b8371062ee839739a086bbe https://git.kernel.org/stable/c/6bbb98bec71b577fda4f4b48f7aea5874b04a576 https://git.kernel.org/stable/c/729b68a5bad71220ae0914c8bdab9488ad5be6c8 https://git.kernel.org/stable/c/93563243377f8e9b46cc94d9c4f06533dd31b141 https://git.kernel.org/stable/c/b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3