CVE-2026-23075

linux: In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix...

CVE-2026-23075 is fixed in 36 products on 1 platform, first by DEBIAN-CVE-2026-23075, released February 4, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0015
3rd percentile

In the Linux kernel, the following vulnerability has been resolved: can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a ("can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak"). In esd_usb_open(), the URBs for USB-in transfers are allocated, added to the dev->rx_submitted anchor and submitted. In the complete callback esd_usb_read_bulk_callback(), the URBs are processed and resubmitted. In esd_usb_close() the URBs are freed by calling usb_kill_anchored_urbs(&dev->rx_submitted). However, this does not take into account that the USB framework unanchors the URB before the complete function is called. This means that once an in-URB has been completed, it is no longer anchored and is ultimately not released in esd_usb_close(). Fix the memory leak by anchoring the URB in the esd_usb_read_bulk_callback() to the dev->rx_submitted anchor.

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-uek · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-doc · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-doc · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-tools · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek-tools · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-200.74.27.el9uek ELSA-2026-50160 Mar 20, 2026
linux · Debian 12.15 (bookworm) 6.1.162-1 DEBIAN-CVE-2026-23075 Feb 4, 2026
linux · Debian 13.5 (trixie) 6.12.69-1 DEBIAN-CVE-2026-23075 Feb 4, 2026
linux · Debian 14 6.18.8-1 DEBIAN-CVE-2026-23075 Feb 4, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.