« Volver al listado

CVE-2026-97484

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

usbip: vhci_hcd: fix NULL deref in status_show_vhci

platform_get_drvdata() can return NULL if a VHCI host controller's probe failed (e.g. due to USB bus number exhaustion). status_show_vhci() checked for a NULL pdev but not for a NULL hcd returned by platform_get_drvdata(). Passing NULL to hcd_to_vhci_hcd() does not return NULL - it returns a pointer offset of 0x260, causing a NULL pointer dereference when that value is subsequently dereferenced.

Add a NULL check on hcd before calling hcd_to_vhci_hcd(). Move status_show_not_ready() above status_show_vhci() to make it callable from the new error path without a forward declaration.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-97484",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "2b477ee5cc9c2670185ffd82911a20e1760008c2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "671d2687a790f63110c3c4213230209f5c3e0e8e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "fd7d938ab4759a45eb107e658c199a2c47cc1ace",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "517c353e5358b2123cbf620a1798fe632fb7bdce",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "046a94fdb02eb1df86c8fa4614104ff801ba3ab7",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "dacd7c317ba12e035653c28a0eaaf23d91abc073",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "0775a9cbc694e8c7276688be3bbd2f386167ab54",
              "lessThan": "bc150783542ba2e7c1257d1299c6f3269bdba270",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/usb/usbip/vhci_sysfs.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.9"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "4.9",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.271",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.222",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/usb/usbip/vhci_sysfs.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-24T17:17:25.933",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/046a94fdb02eb1df86c8fa4614104ff801ba3ab7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2b477ee5cc9c2670185ffd82911a20e1760008c2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/517c353e5358b2123cbf620a1798fe632fb7bdce",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/671d2687a790f63110c3c4213230209f5c3e0e8e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bc150783542ba2e7c1257d1299c6f3269bdba270",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/dacd7c317ba12e035653c28a0eaaf23d91abc073",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/fd7d938ab4759a45eb107e658c199a2c47cc1ace",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusbip: vhci_hcd: fix NULL deref in status_show_vhci\n\nplatform_get_drvdata() can return NULL if a VHCI host controller's\nprobe failed (e.g. due to USB bus number exhaustion). status_show_vhci()\nchecked for a NULL pdev but not for a NULL hcd returned by\nplatform_get_drvdata(). Passing NULL to hcd_to_vhci_hcd() does not\nreturn NULL - it returns a pointer offset of 0x260, causing a NULL\npointer dereference when that value is subsequently dereferenced.\n\nAdd a NULL check on hcd before calling hcd_to_vhci_hcd(). Move\nstatus_show_not_ready() above status_show_vhci() to make it callable\nfrom the new error path without a forward declaration."
    }
  ],
  "lastModified": "2026-10-03T11:17:58.343",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}