CVE-2026-64338: USB: misc: uss720: unregister parport on probe failure

From: Greg Kroah-Hartman <[email protected]>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

USB: misc: uss720: unregister parport on probe failure

uss720_probe() registers a parport before reading the 1284 register used
to detect unsupported Belkin F5U002 adapters. If get_1284_register()
fails, the error path drops the driver private data and the USB device
reference, but leaves the parport device registered.

Leaving the port registered is more than a private allocation leak:
parport_register_port() has already reserved a parport number and
registered the parport bus device, while pp->private_data still points at
the private data that the common error path is about to release.

Undo the pre-announce registration in the get_1284_register() failure
branch before jumping to the common private-data cleanup path. Clear
priv->pp first, matching the disconnect path and avoiding a stale pointer
in the private data.

This issue was identified during our ongoing static-analysis research while
reviewing kernel code.

The Linux kernel CVE team has assigned CVE-2026-64338 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 5.10.221 with commit 04736c1bc32197f7d859e01a96ae80a16659931d and fixed in 5.10.261 with commit 6bbb98bec71b577fda4f4b48f7aea5874b04a576
	Issue introduced in 5.15.162 with commit 4eaf2331a77996bbbaf2b824d452ac8ebda7e6e7 and fixed in 5.15.212 with commit 93563243377f8e9b46cc94d9c4f06533dd31b141
	Issue introduced in 6.1.96 with commit 8fc246a8a456679993df565d3c9e3da28030ee43 and fixed in 6.1.178 with commit 1712fd71a5aaf81e47c747f180535fa963ad7830
	Issue introduced in 6.6.36 with commit 10132ccf99f49b43aeb7470df50d72344a601ad6 and fixed in 6.6.145 with commit 0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea
	Issue introduced in 6.10 with commit 3295f1b866bfbcabd625511968e8a5c541f9ab32 and fixed in 6.12.96 with commit 5e62d7857fd51b908b8371062ee839739a086bbe
	Issue introduced in 6.10 with commit 3295f1b866bfbcabd625511968e8a5c541f9ab32 and fixed in 6.18.39 with commit 729b68a5bad71220ae0914c8bdab9488ad5be6c8
	Issue introduced in 6.10 with commit 3295f1b866bfbcabd625511968e8a5c541f9ab32 and fixed in 7.1.4 with commit 48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e
	Issue introduced in 6.10 with commit 3295f1b866bfbcabd625511968e8a5c541f9ab32 and fixed in 7.2-rc3 with commit b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3
	Issue introduced in 4.19.317 with commit 02d13616ca30014ed96302e51a5b0e17664e58bc
	Issue introduced in 5.4.279 with commit dff3b01e91a3df93063b03d0f8dd5c40546687ec
	Issue introduced in 6.9.7 with commit 489d77fbd66375972a380d207f7eb39b00c4a67b

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-64338
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/usb/misc/uss720.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/6bbb98bec71b577fda4f4b48f7aea5874b04a576
	https://git.kernel.org/stable/c/93563243377f8e9b46cc94d9c4f06533dd31b141
	https://git.kernel.org/stable/c/1712fd71a5aaf81e47c747f180535fa963ad7830
	https://git.kernel.org/stable/c/0b3073f40cc9f95d5ff0037eb0a06f5c1725a7ea
	https://git.kernel.org/stable/c/5e62d7857fd51b908b8371062ee839739a086bbe
	https://git.kernel.org/stable/c/729b68a5bad71220ae0914c8bdab9488ad5be6c8
	https://git.kernel.org/stable/c/48dd0b2ec9f2e97c486eb68cd0a64b25c1c3df3e
	https://git.kernel.org/stable/c/b4ecbdc4f8830f5586c4a5cfc384c00f20f8f8b3