Answer in brief
CVE-2026-90019 records a Unknown severity vulnerability in usb: gadget: fix null pointer dereference in usb_put_function_instance(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <0fc54a00954f9f4c3e3d4ffa64a530685d99a39b || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <6e6736c049683380f5e20becde498986e9293ca4 || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <3a9691fff79bcce95338435599df6d3ae433cfdc || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <7a4f4ca7ff32ae24807c83e2a06d62b13378d53c || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <6ea3a073ca97716d4a73df49a3bec1c3ccf8e2a0 || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <d3a7fa61997db3bf6dadef4c1bd87a4fa782a817 || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <5117f236e9e30744338b425395d55913c4500897 || >=0062f6e56f70bd2230ba1ebd1667d1b32a1af3b2 <6e74ac5c596fd246e37eadfc354567179ccbe9aa | 0fc54a00954f9f4c3e3d4ffa64a530685d99a39b, 6e6736c049683380f5e20becde498986e9293ca4, 3a9691fff79bcce95338435599df6d3ae433cfdc, 7a4f4ca7ff32ae24807c83e2a06d62b13378d53c, 6ea3a073ca97716d4a73df49a3bec1c3ccf8e2a0, d3a7fa61997db3bf6dadef4c1bd87a4fa782a817, 5117f236e9e30744338b425395d55913c4500897, 6e74ac5c596fd246e37eadfc354567179ccbe9aa |
| Linux/Linuxgeneric | 3.9 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usb_put_function_instance() usb_put_function_instance() attempts to dereference fd inside fi struct to get mod in uvc_alloc_inst() error path. However, fd is not allocated until later in try_get_usb_function_instance() after allocating fi in uvc_alloc_inst() and thus guranteed to be null in error path. Fix this by adding a null check for fi->fd that returns if fd is null.
Quoted source text, attributed separately from HOL analysis.