Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31728

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop A race condition between gether_disconnect() and eth_stop() leads to a NULL pointer dereference. Specifically, if eth_stop() is triggered concurrently while gether_disconnect() is tearing down the endpoints, eth_stop() attempts to access the cleared endpoint descriptor, causing the following NPE: Unable to handle kernel NULL pointer dereference Call tra
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:074c2c7fdba9c91c859c69a296ba4ef8c508cb5a9a52f74f41a2eb96f23470a7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f02980594deef751e42133714aee25228f1494c6","status":"affected","version":"2b3d942c4878084a37991a65e66512c02b8fa2ad","versionType":"git"},{"lessThan":"e1e7a66584bf0aff3becb73c19fa31527889fc9e","status":"affected","version":"2b3d942c4878084a37991a65e66512c02b8fa2ad","versionType":"git"},{"lessThan":"a259ba0bce3b192c04334499690372a250f7d0b1","status":"affected","version":"2b3d942c…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f02980594deef751e42133714aee25228f1494c6","status":"affected","version":"2b3d942c4878084a37991a65e66512c02b8fa2ad","versionType":"git"},{"lessThan":"e1e7a66584bf0aff3becb73c19fa31527889fc9e","status":"affected","version":"2b3d942c4878084a37991a65e66512c02b8fa2ad","versionType":"git"},{"lessThan":"a259ba0bce3b192c04334499690372a250f7d0b1","status":"affected","version":"2b3d942c…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/u_ether.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.169","versionType"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/6ad77458637b78ec655e3da5f112c862e6690a9d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/8ff689edfeceb5e3ec1623e09af2b2aa0f1098a8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/a259ba0bce3b192c04334499690372a250f7d0b1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bbb09bb89ffa571475f66daca9482b974cd29d6a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/e1e7a66584bf0aff3becb73c19fa31527889fc9e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/e1eabb072c75681f78312c484ccfffb7430f206e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/f02980594deef751e42133714aee25228f1494c6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f6813c2b2ae78def76b69e0f9d72f80e4a1c4aca"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:041028c3bdf30f8c0f619001889ea440fa0ab5cc3734344a14c5d888abf6447e · sha256:96ebe46913e2a11b… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer