CVE-2026-97484

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the usbip module within the vhci hcd component. The function status show vhci() fails to verify if the hcd pointer returned by platform get drvdata() is NULL, which can occur if a VHCI host controller's probe fails due to reasons such as USB bus number exhaustion. When a NULL value is passed to hcd to vhci hcd(), it returns a pointer offset of 0x260 instead of NULL, leading to a system crash when that value is dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.