CVE-2026-43424

kernel: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's USB gadget subsystem (f_tcm). A malicious or misconfigured USB host can exploit a race condition by sending specific Bulk-Only Transport (BOT) commands. This can trigger a NULL pointer dereference, leading to a kernel panic and a local Denial of Service (DoS) on the affected system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference