cve 2026 68367

CVE-2026-68367 fixes a use-after-free in Linux systems configured to operate as USB storage devices, not a flaw in Windows’ USB stack or in ordinary USB peripherals attached to a PC. The bug sits in the Linux kernel’s f_tcm USB gadget function, which can present a Linux machine to another...