-

CVE-2026-89734

usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()

In uvcg_video_init(), if kthread_run_worker() fails,
the error logged uses uvcg_err(), however, the pointer it uses:
video->uvc is not assigned at this point, triggering a null
pointer dereference. Fix this by directly using uvc->func which
is assigned already.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f0bbfbd16b3b67106535299d6a9ca3a5565494a6
Version < dbe2762ae8e543b06c57f1ac6512b02fd3fd09b2
Status affected
Version f0bbfbd16b3b67106535299d6a9ca3a5565494a6
Version < d511e015d06767f52bb18d48371cab6d7cb88433
Status affected
Version f0bbfbd16b3b67106535299d6a9ca3a5565494a6
Version < 5b1da38592efdc1a263d4c0353298cba19e9d6fc
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.13
Status affected
Version 0
Version < 6.13
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/dbe2762ae8e543b06c57f1ac6512b02fd3fd09b2
https://git.kernel.org/stable/c/d511e015d06767f52bb18d48371cab6d7cb88433
https://git.kernel.org/stable/c/5b1da38592efdc1a263d4c0353298cba19e9d6fc