---
id: CVE-2026-64342
title: 'USB: iowarrior: fix use-after-free on disconnect'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  USB: iowarrior: fix use-after-free on disconnect

  Submitted write URBs are not stopped on close() and therefore need to be
  stopped unconditionally on disconnect() to av…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    d058d377291567b72aea33b017215cbfb383b0ad
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    97ad9337127be04ca0b027c2b01e69302353f404
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    164398601a7f160bc3df1efa454f983302cef03f
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    f328b0e9a0dbd162f5db1b83026b689f2fea2241
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    b748f97aff339e7f08dca9cf38a05b980fb66fea
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    e4596816984efc537e7c04c1af0c639394f967f7
  - >-
    Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 <
    bc0e4f16c44e50daa0b1ea729934baa3b4815dee
  - Linux 2.6.21
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:36:00.297719Z'
published: '2026-07-25'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:44:47.380Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-64342'
references:
  - url: 'https://git.kernel.org/stable/c/d058d377291567b72aea33b017215cbfb383b0ad'
  - url: 'https://git.kernel.org/stable/c/a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595'
  - url: 'https://git.kernel.org/stable/c/97ad9337127be04ca0b027c2b01e69302353f404'
  - url: 'https://git.kernel.org/stable/c/164398601a7f160bc3df1efa454f983302cef03f'
  - url: 'https://git.kernel.org/stable/c/f328b0e9a0dbd162f5db1b83026b689f2fea2241'
  - url: 'https://git.kernel.org/stable/c/b748f97aff339e7f08dca9cf38a05b980fb66fea'
  - url: 'https://git.kernel.org/stable/c/e4596816984efc537e7c04c1af0c639394f967f7'
  - url: 'https://git.kernel.org/stable/c/bc0e4f16c44e50daa0b1ea729934baa3b4815dee'
tags:
  - cve.org
epss: 0.00126
epssPercentile: 0.02268
ingestedAt: '2026-11-06T16:57:43.195Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

USB: iowarrior: fix use-after-free on disconnect

Submitted write URBs are not stopped on close() and therefore need to be
stopped unconditionally on disconnect() to avoid use-after-free in the
completion handler.

## Affected

- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < d058d377291567b72aea33b017215cbfb383b0ad`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < a7bbe946ca3a6eeb6f364d5e84b05e02c7c0d595`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < 97ad9337127be04ca0b027c2b01e69302353f404`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < 164398601a7f160bc3df1efa454f983302cef03f`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < f328b0e9a0dbd162f5db1b83026b689f2fea2241`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < b748f97aff339e7f08dca9cf38a05b980fb66fea`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < e4596816984efc537e7c04c1af0c639394f967f7`
- `Linux >= 946b960d13c15f050a3b848987aaca79f6a459b7 < bc0e4f16c44e50daa0b1ea729934baa3b4815dee`
- `Linux 2.6.21`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.