CVE-2026-31728

The CVE-2026-31728 issue in the Linux kernel affects usb: gadget: u_ether, where a race between gether_disconnect() and eth_stop() could dereference a cleared endpoint descriptor, causing a NULL pointer dereference and a potential hardlockup. The root cause is the delayed clearing of dev->port...

CVE-2026-31728 usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uether: Fix race between getherdisconnect and ethstop A race condition between getherdisconnect and ethstop leads to a NULL pointer dereference. Specifically, if ethstop is triggered concurrently while getherdisconne...