CVE-2026-97483

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: core: hcd: fix possible deadlock in rh control transfers<br /> <br /> &gt;From within the SCSI error handler memory allocations must not<br /> trigger IO. Handling errors in UAS and the storage driver may<br /> involve resetting a device. The thread doing the reset itself<br /> relies on VM magic. However, that is insufficient, as resetting<br /> a device involves resuming it. Resumption as well as resetting<br /> involves conrol transfers to the parent of the device to be reset.<br /> That may be a root hub. Hence usbcore must heed the flags passed<br /> to usb_submit_urb() processing control transfers to root hubs.<br /> <br /> The problem exist since the storage driver has been merged.