All vulnerabilities

Servers and applications

CVE-2026-98764

usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Severity
Unrated
Published
18 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
5.15.224, 6.1.191, 6.6.160, 6.12.113, 6.18.56, 7.2.10
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.10
  • From 6.13 before 6.18.56
  • From 6.7 before 6.12.113
  • From 6.2 before 6.6.160
All 7 release lines
  • From 3.18 before 5.10.273
  • From 5.11 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.7 before 6.12.113
  • From 6.13 before 6.18.56
  • From 6.19 before 7.2.10

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98764