Linux Kernel Vulnerability in VUB300 Driver by Linux Foundation

CVE-2026-31651

What is CVE-2026-31651?

A vulnerability exists in the Linux kernel's VUB300 driver that could lead to a NULL-pointer dereference upon device disconnect. This issue arises when the controller is not deregistered before dropping the reference to the driver data, resulting in potential instability or crashes. Patching this vulnerability is critical to maintaining system integrity and preventing unexpected behavior in environments utilizing the VUB300 driver.

References