cveboard RSS feed

CVE-2026-97484

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

usbip: vhci_hcd: fix NULL deref in status_show_vhci

In the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci platform_get_drvdata() can return NULL if a VHCI host controller's probe failed (e.g. due to USB bus number exhaustion). status_show_vhci() checked for a NULL pdev but not for a NULL hcd returned by platform_get_drvdata(). Passing NULL to hcd_to_vhci_hcd() does not return NULL - it returns a pointer offset of 0x260, causing a NULL pointer dereference when that value is subsequently dereferenced. Add a NULL check on hcd before calling hcd_to_vhci_hcd(). Move status_show_not_ready() above status_show_vhci() to make it callable from the new error path without a forward declaration.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
unaffected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgit2b477ee5cc9c2670185ffd82911a20e1760008c2UnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgit671d2687a790f63110c3c4213230209f5c3e0e8eUnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgitfd7d938ab4759a45eb107e658c199a2c47cc1aceUnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgit517c353e5358b2123cbf620a1798fe632fb7bdceUnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgit046a94fdb02eb1df86c8fa4614104ff801ba3ab7UnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgitdacd7c317ba12e035653c28a0eaaf23d91abc073UnavailableNone listed
0775a9cbc694e8c7276688be3bbd2f386167ab54affectedgitbc150783542ba2e7c1257d1299c6f3269bdba270UnavailableNone listed

Linux

Vendor
Linux
Product
Linux
Platforms
Unknown
Default status
affected
Linux · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
4.9affectedUnavailableUnavailableUnavailableNone listed
0unaffectedsemver4.9UnavailableNone listed
5.10.271unaffectedsemverUnavailable5.10.*None listed
5.15.222unaffectedsemverUnavailable5.15.*None listed
6.1.189unaffectedsemverUnavailable6.1.*None listed
6.6.158unaffectedsemverUnavailable6.6.*None listed
6.12.111unaffectedsemverUnavailable6.12.*None listed
6.18.53unaffectedsemverUnavailable6.18.*None listed
7.2unaffectedoriginal_commit_for_fixUnavailable*None listed