CVE-2026-43431
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/05/2026
Last modified:
12/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xhci: Fix NULL pointer dereference when reading portli debugfs files<br />
<br />
Michal reported and debgged a NULL pointer dereference bug in the<br />
recently added portli debugfs files<br />
<br />
Oops is caused when there are more port registers counted in<br />
xhci->max_ports than ports reported by Supported Protocol capabilities.<br />
This is possible if max_ports is more than maximum port number, or<br />
if there are gaps between ports of different speeds the &#39;Supported<br />
Protocol&#39; capabilities.<br />
<br />
In such cases port->rhub will be NULL so we can&#39;t reach xhci behind it.<br />
Add an explicit NULL check for this case, and print portli in hex<br />
without dereferencing port->rhub.



