In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_hid: don't call cdev_init while cdev in use
When calling unbind, then bind again, cdev_init reinitialized the cdev, even though there may still be references to it. That's the case when the /dev/hidg* device is still opened. This obviously unsafe behavior like oopes.
This fixes this by using cdev_alloc to put the cdev on the heap. That way, we can simply allocate a new one in hidg_bind.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-azure-fde-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-azureUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-7.0Upgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-7.0Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtime-64kUpgrade linux-image-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-gke-6.8Upgrade linux-image-realtime-7.0Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-7.0.0-1010-azureUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-7.0Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-6.8.0-136-genericUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-awsUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-azure-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtual-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-xilinxUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-7.0Upgrade linux-image-azure-fipsUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-24.04dUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-7.0Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04 | Jul 1, 2026 | Apr 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub