CVE-2026-90019usb: gadget: fix null pointer dereference in usb_put_function_instance()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usb_put_function_instance() usb_put_function_instance() attempts to dereference fd inside fi struct to get mod in uvc_alloc_inst() error path. However, fd is not allocated until later in try_get_usb_function_instance() after allocating fi in uvc_alloc_inst() and thus guranteed to be null in error path. Fix this by adding a null check for fi->fd that returns if fd is null.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 0fc54a00954f9f4c3e3d4ffa64a530685d99a39b; 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 6e6736c049683380f5e20becde498986e9293ca4; 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 3a9691fff79bcce95338435599df6d3ae433cfdc; 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 7a4f4ca7ff32ae24807c83e2a06d62b13378d53c; 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 6ea3a073ca97716d4a73df49a3bec1c3ccf8e2a0; from 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 before d3a7fa61997db3bf6dadef4c1bd87a4fa782a817; from 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 before 5117f236e9e30744338b425395d55913c4500897; 0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 builds before 6e74ac5c596fd246e37eadfc354567179ccbe9aa | CNA record |
References
- https://git.kernel.org/stable/c/0fc54a00954f9f4c3e3d4ffa64a530685d99a39b
- https://git.kernel.org/stable/c/6e6736c049683380f5e20becde498986e9293ca4
- https://git.kernel.org/stable/c/3a9691fff79bcce95338435599df6d3ae433cfdc
- https://git.kernel.org/stable/c/7a4f4ca7ff32ae24807c83e2a06d62b13378d53c
- https://git.kernel.org/stable/c/6ea3a073ca97716d4a73df49a3bec1c3ccf8e2a0
- https://git.kernel.org/stable/c/d3a7fa61997db3bf6dadef4c1bd87a4fa782a817
- https://git.kernel.org/stable/c/5117f236e9e30744338b425395d55913c4500897
- https://git.kernel.org/stable/c/6e74ac5c596fd246e37eadfc354567179ccbe9aa
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.