vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97483

usb: core: hcd: fix possible deadlock in rh control transfers

N/A
Published: September 24, 2026 at 04:04 PM UTC
Updated: October 3, 2026 at 11:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers >From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS and the storage driver may involve resetting a device. The thread doing the reset itself relies on VM magic. However, that is insufficient, as resetting a device involves resuming it. Resumption as well as resetting involves conrol transfers to the parent of the device to be reset. That may be a root hub. Hence usbcore must heed the flags passed to usb_submit_urb() processing control transfers to root hubs. The problem exist since the storage driver has been merged.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
3.12 ≤ v < 5.10.2713.12 ≤ v < 5.15.2223.12 ≤ v < 6.1.1893.12 ≤ v < 6.12.1113.12 ≤ v < 6.18.533.12 ≤ v < 6.6.1583.12 ≤ v < 7.23.12e57e780b346a7277fdd3bde765d9d8728b99bfa1
Vendor states this is fixed in 549672a3fb6b36ea408238f89ecf9f41d2da6225 (fixed)
Vendor states this is fixed in 8461eda5af77c44d216cec66455bd5b01ee35c9a (fixed)
Vendor states this is fixed in 8f82fc3d72e5feb7a1efae94b51b431c5bf41c86 (fixed)
Vendor states this is fixed in 936b08d87c667031725bcc753007e7c1182548c6 (fixed)
Vendor states this is fixed in d0291fb4d91982d9f6a680bf759ff0555d351ecb (fixed)
Vendor states this is fixed in d5559f43d76b398392b26a15cbc16d731969cd1c (fixed)
Vendor states this is fixed in fff917c85d37a294397c5440a795591ca9d6b602 (fixed)
Vendor states this is fixed in 3.12 (unaffected)
Vendor states this is fixed in 5.10.271 (unaffected)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (7)

Source: cverecord
https://git.kernel.org/stable/c/fff917c85d37a294397c5440a795591ca9d6b602
Source: cverecord
https://git.kernel.org/stable/c/549672a3fb6b36ea408238f89ecf9f41d2da6225
Source: cverecord
https://git.kernel.org/stable/c/d5559f43d76b398392b26a15cbc16d731969cd1c
Source: cverecord
https://git.kernel.org/stable/c/8461eda5af77c44d216cec66455bd5b01ee35c9a
Source: cverecord
https://git.kernel.org/stable/c/8f82fc3d72e5feb7a1efae94b51b431c5bf41c86
Source: cverecord
https://git.kernel.org/stable/c/936b08d87c667031725bcc753007e7c1182548c6
Source: cverecord
https://git.kernel.org/stable/c/d0291fb4d91982d9f6a680bf759ff0555d351ecb

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card