CVE-2026-31606
usb: gadget: f_hid: don't call cdev_init while cdev in use
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_hid: don't call cdev_init while cdev in use When calling unbind, then bind again, cdev_init reinitialized the cdev, even though there may still be references to it. That's the case when the /dev/hidg* device is still opened. This obviously unsafe behavior like oopes. This fixes this by using cdev_alloc to put the cdev on the heap. That way, we can simply allocate a new one in hidg_bind.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Apr 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c6c0d13db5d0f8d465eabc14bd23d2b6a7247a43 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < eb6ef6185f2054a341ec70d7e2165f5381744215 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5a229016ca3ac551294ec59770be9da94ec4bf63 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 75ecc46828ec377dd5692c677168ef6d64fd7123
Linux / Linux
All versions affected References
git.kernel.org: https://git.kernel.org/stable/c/c6c0d13db5d0f8d465eabc14bd23d2b6a7247a43 git.kernel.org: https://git.kernel.org/stable/c/eb6ef6185f2054a341ec70d7e2165f5381744215 git.kernel.org: https://git.kernel.org/stable/c/5a229016ca3ac551294ec59770be9da94ec4bf63 git.kernel.org: https://git.kernel.org/stable/c/75ecc46828ec377dd5692c677168ef6d64fd7123