CVE-2026-43471

A flaw was found in the Linux kernel's SCSI Universal Flash Storage (UFS) core. This flaw occurs due to a missing null pointer check in the ufshcd_add_command_trace() function. A local attacker could potentially trigger a scenario where a null value is returned by ufshcd_mcq_req_to_hwq(), leading to a null pointer dereference and a kernel crash. This can result in a Denial of Service (DoS) condition, making the system unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.