Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-68374 Details

Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read(). This function accesses udev->bos, which could be simultaneously freed in usb_reset_and_verify_device(), a function that is commonly called in drivers all over the kernel.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/217774e143d7b5a88739193284b6421be3978601 kernel.org
https://git.kernel.org/stable/c/4e0197fbb0eec588795d5431716a244d9ac8fa93 kernel.org
https://git.kernel.org/stable/c/ab82adf5e63b2d89ead7933ab753b9cedbe028e9 kernel.org
https://git.kernel.org/stable/c/c07caee449c968842a350bfefa049889923b8240 kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-68374
NVD Published Date:
Aug 10, 2026
NVD Last Modified:
Aug 18, 2026
Source:
kernel.org
CVE-2026-68374 Details - Not Deferred