CVE-2026-90019

CVE-2026-90019 affects the Linux kernel USB gadget subsystem. In the UVC function implementation, usb_put_function_instance() dereferences fi->fd to retrieve the module reference in the uvc_alloc_inst() error path. However, fd is not allocated until later in try_get_usb_function_instance(), so...