CVE-2026-90019

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference occurs in the usb put function instance() function. This happens when the function attempts to dereference the fd variable within the fi structure to retrieve the module in the uvc alloc inst() error path. Because fd is not allocated until the try get usb function instance() stage, it is guaranteed to be null during the error path in uvc alloc inst().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.