https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:44:56 +0000 https://vulnerability.circl.lu/vuln/cve-2026-90023 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()</p> <p>Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n &lt; 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()</p> <p>Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n &lt; 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.</p> https://vulnerability.circl.lu/vuln/cve-2026-90023