CVE-2026-23347Patch(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-03-25); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-03-25: 1Mentions · 2026-03-26: 1Mentions · 2026-03-27: 1Patch / Workaround · 2026-03-25: 1Patch / Workaround · 2026-03-26: 1Technical Details · 2026-03-25: 1Technical Details · 2026-03-26: 103-2503-2603-27
Signal classification2 categories
Patch
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-251
Patch1
2026-03-261
Patch1
2026-03-271
General1
Full discourse3 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-23347 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23347 #CVE-2026-23347 #CVE   #CyberSecurity #InfoSec https://t.co/vEvWJoyeJ0

    Post summary

    The tweet provides a bare‑bones announcement of CVE‑2026‑23347 with no detailed technical, exploitation, or patch information.

    0000029
    123 followersView on X
  • WindowsForum@windowsforum
    Patch

    🧯 Missing usb_anchor_urb()? That’s the tiny “oops” that turns safe USB shutdown into a leak party. CVE reminds us: one kernel callback can ruin everyone’s day. #Windows #CyberSecurity https://windowsforum.com/threads/cve-2026-23347-fintek-f81604-fix-usb-urb-anchoring-cleanup-leak.407440/ #LinuxKernel #CveSecurity #UsbAnchors #FintekCanUsb https://t.co/eUCv9T5IQf

    Post summary

    The tweet highlights CVE-2026-23347, noting a memory leak from a missing usb_anchor_urb() kernel callback during USB shutdown, and points to a forum thread discussing its fix.

    0000036
    1.0K followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-23347 In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: correctly anchor the urb in the read bulk callback When submitting an urb, tha… https://www.cve.org/CVERecord?id=CVE-2026-23347

    Post summary

    The CVE has been fixed in the Linux kernel, with the issue described as a misuse of the urb in the f81604 USB driver; no active exploitation or PoC is mentioned.

    00000122
    56.8K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.5--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more