Null Pointer Dereference in Linux Kernel USB Gadget Video Functionality

CVE-2026-89734

What is CVE-2026-89734?

A vulnerability exists in the Linux kernel's USB gadget video functionality, specifically in the uvcg_video_init() function. When the function kthread_run_worker() fails, an error is logged using uvcg_err(). However, the video->uvc pointer is not assigned at this moment, leading to a potential null pointer dereference. This issue is addressed by updating the code to utilize the already assigned uvc->func, preventing any disruption in the function's operation.

References