CVE-2026-64240: In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup p
infovulnerability
security
Summary
A bug in the Linux kernel's igorplugusb driver (a USB infrared remote control device driver) causes the USB core (the software that manages USB communication) to receive an incorrect setup packet because the driver passes a pointer address instead of the actual data structure. This makes the USB core misinterpret the control request and generate a warning about a mismatched control direction.
Solution / Mitigation
Pass ir->request itself as the setup packet instead of &ir->request (which points to the pointer field rather than the allocated struct usb_ctrlrequest).
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
July 24, 2026
Classification
Attack SophisticationModerate
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64240
First tracked: July 24, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 95%