{"id":"CVE-2026-74459","summary":"can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncan: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure\n\nes58x_read_bulk_callback() resubmits the RX URB after processing a received\npacket. If the resubmit succeeds, the URB remains anchored and will be\nhandled by the normal RX path or by teardown.\n\nHowever, if usb_submit_urb() fails, the callback unanchors the URB and then\nreturns directly. This skips the existing free_urb path, so the coherent\ntransfer buffer allocated with usb_alloc_coherent() is not released.\n\nReuse the existing free_urb path after a resubmit failure so that the RX\ncoherent buffer is freed before leaving the callback.","modified":"2026-11-13T04:02:34.331826814Z","published":"2026-08-15T12:27:00.653Z","related":["SUSE-SU-2026:24550-1","SUSE-SU-2026:24619-1","SUSE-SU-2026:24643-1","SUSE-SU-2026:24648-1","SUSE-SU-2026:24651-1","SUSE-SU-2026:24662-1","SUSE-SU-2026:5091-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74459.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0ef136ba052101243ba117a1aca6f4a4c3a81142"},{"type":"WEB","url":"https://git.kernel.org/stable/c/19c6c8c6cd5dd14fab5fcd744584812a57cbb78d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/21da1a374769751546cc131e58a4d8bd968f57b2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/7a0cf2b2497c757c3cb1286eddf2986abb0d387b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b85e5c310382803d27adf6fe6554d4208bc8951c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c311f17c261fd375ddf5755f2ebe1f022c19c5b0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c7ddf119544eea2d8409e12471c3f9f36ca02e3f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74459.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74459"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7a0171b4921ad443fee5ed4fcb9d99fa4776edac"},{"fixed":"c7ddf119544eea2d8409e12471c3f9f36ca02e3f"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"2185ea6e4ebcb61d1224dc7d187c59723cb5ad59"},{"fixed":"21da1a374769751546cc131e58a4d8bd968f57b2"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f6e90c113c92e83fc0963d5e60e16b0e8a268981"},{"fixed":"0ef136ba052101243ba117a1aca6f4a4c3a81142"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b878444519fa03a3edd287d1963cf79ef78be2f1"},{"fixed":"b85e5c310382803d27adf6fe6554d4208bc8951c"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"18eee279e9b5bff0db1aca9475ae4bc12804f05c"},{"fixed":"c311f17c261fd375ddf5755f2ebe1f022c19c5b0"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5eaad4f768266f1f17e01232ffe2ef009f8129b7"},{"fixed":"19c6c8c6cd5dd14fab5fcd744584812a57cbb78d"},{"fixed":"7a0cf2b2497c757c3cb1286eddf2986abb0d387b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"b8f9ca88253574638bcff38900a4c28d570b1919"}]}],"versions":["v5.15.215","v5.15.214","v5.15.213","v5.15.212","v5.15.211","v5.15.210","v5.15.209","v5.15.208","v5.15.207","v5.15.206","v5.15.205","v5.15.204","v5.15.203","v6.1.182","v6.1.181","v6.1.180","v6.1.179","v6.1.178","v6.1.177","v6.1.176","v6.1.175","v6.1.174","v6.1.173","v6.1.172","v6.1.171","v6.1.170","v6.1.169","v6.1.168","v6.1.167","v6.6.150","v6.6.149","v6.6.148","v6.6.147","v6.6.146","v6.6.145","v6.6.144","v6.6.143","v6.6.142","v6.6.141","v6.6.140","v6.6.139","v6.6.138","v6.6.137","v6.6.136","v6.6.135","v6.6.134","v6.6.133","v6.6.132","v6.6.131","v6.6.130","v6.12.102","v6.12.101","v6.12.100","v6.12.99","v6.12.98","v6.12.97","v6.12.96","v6.12.95","v6.12.94","v6.12.93","v6.12.92","v6.12.91","v6.12.90","v6.12.89","v6.12.88","v6.12.87","v6.12.86","v6.12.85","v6.12.84","v6.12.83","v6.12.82","v6.12.81","v6.12.80","v6.12.79","v6.12.78","v6.12.77","v6.18.43","v6.18.42","v6.18.41","v6.18.40","v6.18.39","v6.18.38","v6.18.37","v6.18.36","v6.18.35","v6.18.34","v6.18.33","v6.18.32","v6.18.31","v6.18.30","v6.18.29","v6.18.28","v6.18.27","v6.18.26","v6.18.25","v6.18.24","v6.18.23","v6.18.22","v6.18.21","v6.18.20","v6.18.19","v6.18.18","v6.18.17","v6.19.14","v6.19.13","v6.19.12","v6.19.11","v6.19.10","v6.19.9","v6.19.8","v6.19.7"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74459.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.15.203"},{"fixed":"5.15.216"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.1.167"},{"fixed":"6.1.183"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.6.130"},{"fixed":"6.6.151"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.12.77"},{"fixed":"6.12.103"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.18.17"},{"fixed":"6.18.44"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.7"},{"fixed":"6.20"}]},{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"7.1.8"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-74459.json"}}],"schema_version":"1.9.2"}