CVE-2026-31726

kernel: usb: gadget: uvc: fix NULL pointer dereference during unbind race

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's USB Video Class (UVC) gadget driver. A race condition during power management (PM) transitions can cause a null pointer dereference. This occurs when the system attempts to access a deallocated gadget pointer, leading to a kernel panic. This vulnerability can be triggered by a local user or system process during power management operations, resulting in a Denial of Service (DoS) due to system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition