In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_ncm: Refactor bind path to use __free()
After an bind/unbind cycle, the ncm->notify_req is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->free_request.
Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 Call trace: usb_ep_free_request+0x2c/0xec ncm_bind+0x39c/0x3dc usb_add_function+0xcc/0x1f0 configfs_composite_bind+0x468/0x588 gadget_bind_driver+0x104/0x270 really_probe+0x190/0x374 __driver_probe_device+0xa0/0x12c driver_probe_device+0x3c/0x218 __device_attach_driver+0x14c/0x188 bus_for_each_drv+0x10c/0x168 __device_attach+0xfc/0x198 device_initial_probe+0x14/0x24 bus_probe_device+0x94/0x11c device_add+0x268/0x48c usb_add_gadget+0x198/0x28c dwc3_gadget_init+0x700/0x858 __dwc3_set_mode+0x3cc/0x664 process_scheduled_works+0x1d8/0x488 worker_thread+0x244/0x334 kthread+0x114/0x1bc ret_from_fork+0x10/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 13, 2025 | Nov 13, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Oct 30, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-intelUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-5.15.0-1094-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1095-nvidia-lowlatencyUpgrade linux-image-5.15.0-1083-gkeopUpgrade linux-image-5.15.0-1097-oracleUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-5.15.0-1110-azureUpgrade linux-image-aws-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oem-6.17Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-realtime-6.17Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1095-intel-iotgUpgrade linux-image-azure-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-5.15.0-1052-nvidia-tegraUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-5.15.0-170-lowlatencyUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-virtual-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-170-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1096-gkeUpgrade linux-image-5.15.0-1100-gcpUpgrade linux-image-5.15.0-1095-nvidiaUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1092-intel-iot-realtimeUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-igxUpgrade linux-image-raspi-6.8Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1041-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-170-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-5.15.0-1109-azureUpgrade linux-image-5.15.0-1052-nvidia-tegra-rtUpgrade linux-image-raspi-6.17Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-5.15.0-170-generic-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-5.15.0-170-generic-lpaeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-5.15.0-1100-gcp-fipsUpgrade linux-image-5.15.0-1100-awsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-6.17Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-6.17Upgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-5.15.0-1100-aws-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-fips-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-5.15.0-170-fipsUpgrade linux-image-5.15.0-1100-aws-fipsUpgrade linux-image-5.15.0-1064-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-6.17Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1092-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1099-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-64k-lts-22.04 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub