-

CVE-2026-97484

usbip: vhci_hcd: fix NULL deref in status_show_vhci

In the Linux kernel, the following vulnerability has been resolved:

usbip: vhci_hcd: fix NULL deref in status_show_vhci

platform_get_drvdata() can return NULL if a VHCI host controller's
probe failed (e.g. due to USB bus number exhaustion). status_show_vhci()
checked for a NULL pdev but not for a NULL hcd returned by
platform_get_drvdata(). Passing NULL to hcd_to_vhci_hcd() does not
return NULL - it returns a pointer offset of 0x260, causing a NULL
pointer dereference when that value is subsequently dereferenced.

Add a NULL check on hcd before calling hcd_to_vhci_hcd(). Move
status_show_not_ready() above status_show_vhci() to make it callable
from the new error path without a forward declaration.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < 2b477ee5cc9c2670185ffd82911a20e1760008c2
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < 671d2687a790f63110c3c4213230209f5c3e0e8e
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < fd7d938ab4759a45eb107e658c199a2c47cc1ace
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < 517c353e5358b2123cbf620a1798fe632fb7bdce
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < 046a94fdb02eb1df86c8fa4614104ff801ba3ab7
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < dacd7c317ba12e035653c28a0eaaf23d91abc073
Status affected
Version 0775a9cbc694e8c7276688be3bbd2f386167ab54
Version < bc150783542ba2e7c1257d1299c6f3269bdba270
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.9
Status affected
Version 0
Version < 4.9
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/046a94fdb02eb1df86c8fa4614104ff801ba3ab7
https://git.kernel.org/stable/c/dacd7c317ba12e035653c28a0eaaf23d91abc073
https://git.kernel.org/stable/c/bc150783542ba2e7c1257d1299c6f3269bdba270
https://git.kernel.org/stable/c/2b477ee5cc9c2670185ffd82911a20e1760008c2
https://git.kernel.org/stable/c/517c353e5358b2123cbf620a1798fe632fb7bdce
https://git.kernel.org/stable/c/671d2687a790f63110c3c4213230209f5c3e0e8e
https://git.kernel.org/stable/c/fd7d938ab4759a45eb107e658c199a2c47cc1ace