cve 2026 68374

The cve 2026 68374 tag covers a specific Linux USB-core race condition in the bos_descriptors sysfs file, identified as CVE-2026-68374. For Windows users, the relevance is limited to WSL 2 installations that expose USB devices to Linux. The National Vulnerability Database published the identifier on August 11, 2026, but the record was incomplete at publication time, lacking a CVSS score, affected-version list, weakness classification, and exploit description. The fix is included in Linux 7.2-rc5 as a patch adding a lock to bos_descriptors_read(). This tag is useful for those tracking security updates and vulnerabilities affecting WSL 2 and Linux kernel components.