GHSA-G24X-RPV9-J8MW
Vulnerability from github – Published: 2026-10-18 18:32 – Updated: 2026-10-30 15:33In the Linux kernel, the following vulnerability has been resolved:
USB: dwc2: shut down wakeup timer before freeing HCD state
dwc2_wakeup_detected() accesses the DWC2 host state and can rearm the wakeup timer. dwc2_hcd_free() currently deletes the timer only after freeing host-owned state, and timer_delete() does not synchronize a callback or prevent it from being queued again.
Stop and shut down the timer in dwc2_hcd_release(), before the HCD resources are freed. This covers both the HCD initialization error path and normal HCD removal.
{
"affected": [],
"aliases": [
"CVE-2026-98762"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-10-18T16:17:30Z",
"severity": null
},
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: dwc2: shut down wakeup timer before freeing HCD state\n\ndwc2_wakeup_detected() accesses the DWC2 host state and can rearm the\nwakeup timer. dwc2_hcd_free() currently deletes the timer only after\nfreeing host-owned state, and timer_delete() does not synchronize a\ncallback or prevent it from being queued again.\n\nStop and shut down the timer in dwc2_hcd_release(), before the HCD\nresources are freed. This covers both the HCD initialization error path\nand normal HCD removal.",
"id": "GHSA-g24x-rpv9-j8mw",
"modified": "2026-10-30T15:33:59Z",
"published": "2026-10-18T18:32:02Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98762"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/0b2ea59d66d046d5601ffc3e61dd09d3597c704e"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/4333174ea52c863a50bb3e0a4726bf9f7cdf7524"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/441be312fce927443eae2821f502344d953c38bb"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/79ba37dd38a321cb32a79332a3e3c68dd334dca9"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/82cc242da6d621752718929e6a2fa6f9554ebffe"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/f3d76baa5b902f681100447e9d185819c5c1316d"
},
{
"type": "WEB",
"url": "https://git.kernel.org/stable/c/fd772af9512cdecb83de34a461801533828e77fd"
}
],
"schema_version": "1.4.0",
"severity": []
}
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.