CVE-2026-23155

Katalog CVE

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan NULL Pointer Dereference pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Sinc commit 79a6d1bfe114 ("can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error") a failing resubmit URB will print an info message. In the case of a short read where netdev has not yet been assigned, initialize as NULL to avoid dereferencing an undefined value. Also report the error value of the failed resubmit.

Rincian

Terbit di NVD

14 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/494fc029f662c331e06b7c2031deff3c64200eed patch
• https://git.kernel.org/stable/c/713ba826ae114ab339c9a1b31e209bebdadb0ac9 patch
• https://git.kernel.org/stable/c/8986cdf52f86208df9c7887fee23365b5d37da26 patch
• https://git.kernel.org/stable/c/923379f1d7e3af8ccbf11edbbcf41f1bb3e9cfe6 patch
• https://git.kernel.org/stable/c/aed58a28ea71a0d7d0947190fab1e3f4daa1d4a5 patch
• https://git.kernel.org/stable/c/7a431df418ee6b79841e0b4c7c265a791e3d0a75