CVE-2026-63906 - Vulnerability Details

- usb: musb: omap2430: Fix use-after-free in omap2430_probe()

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: omap2430: Fix use-after-free in omap2430_probe()

In omap2430_probe(), of_node_put(np) is called prematurely before the
last access to np, leading to a use-after-free if the node's reference
count drops to zero. Move the of_node_put() calls after the last use of
np in both the success and error paths.

Published: 2026-07-19

Score: 8.4 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`22b60658a90260e3fbd57824e3afe5682c6afcf5`	affected	< 632fd888fe33083927e29ef651ac1aba345edd9e
`ffbe2feac59b37c8dc536727552b4f375e1b9aec`	affected	< b987f380620b38c84f054d5ff5c05861a7c2203b
`ffbe2feac59b37c8dc536727552b4f375e1b9aec`	affected	< 27e62532228dc42367bb43ebbcd7bf49d8db2b0d
`ffbe2feac59b37c8dc536727552b4f375e1b9aec`	affected	< 69f9f2b30af03d9b6e83f78fb0f734b6066d4678
`ffbe2feac59b37c8dc536727552b4f375e1b9aec`	affected	< d53e4c41331f57b9fd78cbf3e480c6ce20aea07b
`ffbe2feac59b37c8dc536727552b4f375e1b9aec`	affected	< e194ce048f5a6c549b3a23a8c568c6470f40f772
`fed43efc00ba6ac8c6b95828cd5acfa3d45eca4d`	affected	—
`6.1.2`	affected	< 6.1.176
`6.0.16`	affected	< 6.1

Linux

affected

Version	Status	Constraints
`6.2`	affected	—
`0`	unaffected	< 6.2
`6.1.176`	unaffected	≤ 6.1.*
`6.6.143`	unaffected	≤ 6.6.*
`6.12.93`	unaffected	≤ 6.12.*
`6.18.35`	unaffected	≤ 6.18.*
`7.0.12`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[22b60658a90260e3fbd57824e3afe5682c6afcf5,632fd888fe33083927e29ef651ac1aba345edd9e)`	affected	code_commit	—
`[ffbe2feac59b37c8dc536727552b4f375e1b9aec,b987f380620b38c84f054d5ff5c05861a7c2203b)`	affected	code_commit	—
`[ffbe2feac59b37c8dc536727552b4f375e1b9aec,27e62532228dc42367bb43ebbcd7bf49d8db2b0d)`	affected	code_commit	—
`[ffbe2feac59b37c8dc536727552b4f375e1b9aec,69f9f2b30af03d9b6e83f78fb0f734b6066d4678)`	affected	code_commit	—
`[ffbe2feac59b37c8dc536727552b4f375e1b9aec,d53e4c41331f57b9fd78cbf3e480c6ce20aea07b)`	affected	code_commit	—
`[ffbe2feac59b37c8dc536727552b4f375e1b9aec,e194ce048f5a6c549b3a23a8c568c6470f40f772)`	affected	code_commit	—
`fed43efc00ba6ac8c6b95828cd5acfa3d45eca4d`	affected	code_commit	—
`[6.1.2,6.1.176)`	affected	semver	—
`[6.0.16,6.1.0)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.2`	affected	generic	—
`[0,6.2)`	unaffected	generic	—
`[6.1.176,6.2.0)`	unaffected	semver	—
`[6.6.143,6.7.0)`	unaffected	semver	—
`[6.12.93,6.13.0)`	unaffected	semver	—
`[6.18.35,6.19.0)`	unaffected	semver	—
`[7.0.12,7.1.0)`	unaffected	semver	—
`[7.1,*)`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00177.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/27e62532228dc42367bb43ebbcd7bf49d8db2b0d
https://git.kernel.org/stable/c/632fd888fe33083927e29ef651ac1aba345edd9e
https://git.kernel.org/stable/c/69f9f2b30af03d9b6e83f78fb0f734b6066d4678
https://git.kernel.org/stable/c/b987f380620b38c84f054d5ff5c05861a7c2203b
https://git.kernel.org/stable/c/d53e4c41331f57b9fd78cbf3e480c6ce20aea07b
https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772

History

Mon, 20 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Sun, 19 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2430_probe() In omap2430_probe(), of_node_put(np) is called prematurely before the last access to np, leading to a use-after-free if the node's reference count drops to zero. Move the of_node_put() calls after the last use of np in both the success and error paths.
Title		usb: musb: omap2430: Fix use-after-free in omap2430_probe()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/27e62532228dc42367bb43ebbcd7bf49d8db2b0d https://git.kernel.org/stable/c/632fd888fe33083927e29ef651ac1aba345edd9e https://git.kernel.org/stable/c/69f9f2b30af03d9b6e83f78fb0f734b6066d4678 https://git.kernel.org/stable/c/b987f380620b38c84f054d5ff5c05861a7c2203b https://git.kernel.org/stable/c/d53e4c41331f57b9fd78cbf3e480c6ce20aea07b https://git.kernel.org/stable/c/e194ce048f5a6c549b3a23a8c568c6470f40f772

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T14:55:12.982Z

Updated: 2026-07-20T13:41:18.250Z

Reserved: 2026-07-19T07:54:57.020Z

Link: CVE-2026-63906

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-21T06:30:02Z

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object