In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_ecm: Refactor bind path to use __free()
After an bind/unbind cycle, the ecm->notify_req is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->free_request.
Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 13, 2025 | Nov 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-6.17Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-6.17Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.17Upgrade linux-image-aws-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.17Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-azure-6.17Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-azureUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-generic-64k | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Oct 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub