CVE-2026-97483
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
usb: core: hcd: fix possible deadlock in rh control transfers
In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers >From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS and the storage driver may involve resetting a device. The thread doing the reset itself relies on VM magic. However, that is insufficient, as resetting a device involves resuming it. Resumption as well as resetting involves conrol transfers to the parent of the device to be reset. That may be a root hub. Hence usbcore must heed the flags passed to usb_submit_urb() processing control transfers to root hubs. The problem exist since the storage driver has been merged.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | 8461eda5af77c44d216cec66455bd5b01ee35c9a | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | 8f82fc3d72e5feb7a1efae94b51b431c5bf41c86 | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | 936b08d87c667031725bcc753007e7c1182548c6 | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | d0291fb4d91982d9f6a680bf759ff0555d351ecb | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | fff917c85d37a294397c5440a795591ca9d6b602 | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | 549672a3fb6b36ea408238f89ecf9f41d2da6225 | Unavailable | None listed |
| e57e780b346a7277fdd3bde765d9d8728b99bfa1 | affected | git | d5559f43d76b398392b26a15cbc16d731969cd1c | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.12 | Unavailable | None listed |
| 5.10.271 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.222 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.189 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.158 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.111 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.53 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2 | unaffected | original_commit_for_fix | Unavailable | * | None listed |