-

CVE-2026-90023

usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()

Previously fsg_num_buffers_validate() was removed as it was not
necessary due to Kconfig setting the limits for n from 2 to 256 with
default as 2. However, setting the page content in such a way that
kstrtou8() reflects n value as either 0 or 1 bypasses these
restrictions leading to a null pointer dereference if n is 0. Fix
this by adding a check for n < 2 and returning -EINVAL if n is
either 0 or 1 consistent with Kconfig logic.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fe5a6c48fd954489f51aab151d5dad9254c76419
Version < 51cc9af4f2d3f0b765266aced66b9b532b423b13
Status affected
Version fe5a6c48fd954489f51aab151d5dad9254c76419
Version < 9e8dd2a7a8ccbb756771ad985b0ad3387ed3c957
Status affected
Version fe5a6c48fd954489f51aab151d5dad9254c76419
Version < b9b5b5df5b8dd3c1572ed267200276a44cc67d8e
Status affected
Version fe5a6c48fd954489f51aab151d5dad9254c76419
Version < 2c0f5ca48674a5b5f9fa4a9c3325aa48053af0bc
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.8
Status affected
Version 0
Version < 4.8
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.115
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9e8dd2a7a8ccbb756771ad985b0ad3387ed3c957
https://git.kernel.org/stable/c/b9b5b5df5b8dd3c1572ed267200276a44cc67d8e
https://git.kernel.org/stable/c/2c0f5ca48674a5b5f9fa4a9c3325aa48053af0bc
https://git.kernel.org/stable/c/51cc9af4f2d3f0b765266aced66b9b532b423b13