CVE-2026-31755

A flaw was found in the Linux kernel's cdns3 USB gadget driver. When a gadget endpoint is disabled or not yet configured, a NULL pointer dereference can occur in the epqueue function. This can lead to a kernel crash, resulting in a denial of service DoS on the affected system...

PT-2022-33493 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the cdns3 gadget driver in the Linux Kernel. It involves the assignment of 'priv ep' in the cdns3 gadget ep dequeue and cdns3 gadget ep enable functions. The actual...