CVE-2026-97482
Received Received - Intake

NULL dereference in Linux kernel USB gadget driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log goku_irq() handles a number of bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL ->driver: if (dev->gadget.speed != USB_SPEED_UNKNOWN && dev->driver && dev->driver->resume) { spin_unlock(&dev->lock); dev->driver->resume(&dev->gadget); ... } but the very next branch unconditionally dereferences dev->driver when an INT_USBRESET arrives: if (stat & INT_USBRESET) { ACK(INT_USBRESET); INFO(dev, "USB reset done, gadget %s\n", dev->driver->driver.name); } If the controller raises INT_USBRESET before any gadget driver has been bound (or after one has been unbound), dev->driver is NULL and the printk dereferences NULL. smatch flags the inconsistency: drivers/usb/gadget/udc/goku_udc.c:1618 goku_irq() error: we previously assumed 'dev->driver' could be null (see line 1607) Fall back to a placeholder when the gadget driver is not bound. No functional change while a gadget driver is bound.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-97482
EUVD
EUVD-2026-86080

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's USB gadget driver subsystem, specifically in the goku_udc driver. It involves a NULL pointer dereference when handling USB reset events. The code fails to check if the gadget driver is bound before accessing its name field, which can crash the system if the driver is not loaded.

Detection Guidance

This vulnerability is specific to the Linux kernel's USB gadget driver subsystem and requires kernel-level inspection. Detection involves checking kernel logs for NULL pointer dereference errors related to the goku_udc driver. Use commands like 'dmesg | grep -i goku_udc' or 'journalctl -k | grep -i goku_udc' to search for relevant errors.

Impact Analysis

If exploited, this vulnerability could cause a kernel crash or denial of service on systems using the affected USB gadget driver. It may lead to system instability or require a reboot to recover. Systems not using this specific driver are not affected.

Mitigation Strategies

Apply the latest Linux kernel security updates to patch this issue. If immediate patching is not possible, avoid using USB gadget functionality until the update is applied. Monitor kernel logs for NULL pointer dereference errors in the goku_udc driver as a sign of exploitation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97482. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart