{"id":"CVE-2026-64332","summary":"USB: ulpi: fix memory leak on registration failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: ulpi: fix memory leak on registration failure\n\nThe allocated device name is never freed on early ULPI device\nregistration failures.\n\nFix this by initialising the device structure earlier and releasing the\ninitial reference whenever registration fails.","modified":"2026-11-08T02:32:58.821034723Z","published":"2026-07-25T08:49:59.005Z","related":["SUSE-SU-2026:23477-1","SUSE-SU-2026:23481-1","SUSE-SU-2026:23528-1","SUSE-SU-2026:23529-1","SUSE-SU-2026:23881-1","SUSE-SU-2026:23887-1","SUSE-SU-2026:23897-1","SUSE-SU-2026:23902-1","SUSE-SU-2026:4120-1","SUSE-SU-2026:4254-1","SUSE-SU-2026:4282-1","openSUSE-SU-2026:11476-1","openSUSE-SU-2026:21910-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64332.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1967a7f0cd5c08eb479196daa5aaa4b7b7a7bd04"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5c098f20f15db7f9126129686d1c6da2ce8bbeb0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/624c57147df1977e0d3da53f1da7117861b9cf19"},{"type":"WEB","url":"https://git.kernel.org/stable/c/691e61e5d4cfc5a1b061e937f8cbf2126bfc19a0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/88187a43135c79d0e43573b4d8f880bbb919eceb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8af6812795869a66e9b26044f455b13deecdb69c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d5b32f36c50894ac2df8fa184e6f35f3a6665ecd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e5493c9a98ffe083acf13ac064828ae598ba3c16"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64332.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64332"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"289fcff4bcdb1dcc0ce8788b7ea0f58a9e4a495f"},{"fixed":"d5b32f36c50894ac2df8fa184e6f35f3a6665ecd"},{"fixed":"691e61e5d4cfc5a1b061e937f8cbf2126bfc19a0"},{"fixed":"88187a43135c79d0e43573b4d8f880bbb919eceb"},{"fixed":"5c098f20f15db7f9126129686d1c6da2ce8bbeb0"},{"fixed":"624c57147df1977e0d3da53f1da7117861b9cf19"},{"fixed":"1967a7f0cd5c08eb479196daa5aaa4b7b7a7bd04"},{"fixed":"e5493c9a98ffe083acf13ac064828ae598ba3c16"},{"fixed":"8af6812795869a66e9b26044f455b13deecdb69c"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64332.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.96"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.39"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64332.json"}}],"schema_version":"1.9.2"}