CVE-2026-43431
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
08/05/2026
Última modificación:
20/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xhci: Fix NULL pointer dereference when reading portli debugfs files<br />
<br />
Michal reported and debgged a NULL pointer dereference bug in the<br />
recently added portli debugfs files<br />
<br />
Oops is caused when there are more port registers counted in<br />
xhci->max_ports than ports reported by Supported Protocol capabilities.<br />
This is possible if max_ports is more than maximum port number, or<br />
if there are gaps between ports of different speeds the &#39;Supported<br />
Protocol&#39; capabilities.<br />
<br />
In such cases port->rhub will be NULL so we can&#39;t reach xhci behind it.<br />
Add an explicit NULL check for this case, and print portli in hex<br />
without dereferencing port->rhub.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.9 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página