All vulnerabilities
CVE-2026-97483

Linux: usb: core: hcd: fix possible deadlock in rh control transfers

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in8461eda5af77c44d216cec66455bd5b01ee35c9aAlso 8f82fc3d72e5feb7a1efae94b51b431c5bf41c86, 936b08d87c667031725bcc753007e7c1182548c6 and 1 moreCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 8461eda5af77c44d216cec66455bd5b01ee35c9aLinuxCVE List
  • 8f82fc3d72e5feb7a1efae94b51b431c5bf41c86LinuxCVE List
  • 936b08d87c667031725bcc753007e7c1182548c6LinuxCVE List
  • 549672a3fb6b36ea408238f89ecf9f41d2da6225LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: core: hcd: fix possible deadlock in rh control transfers

>From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS and the storage driver may involve resetting a device. The thread doing the reset itself relies on VM magic. However, that is insufficient, as resetting a device involves resuming it. Resumption as well as resetting involves conrol transfers to the parent of the device to be reset. That may be a root hub. Hence usbcore must heed the flags passed to usb_submit_urb() processing control transfers to root hubs.

The problem exist since the storage driver has been merged.

Text from CVE List

Affected versions 16

  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before 8461eda5af77c44d216cec66455bd5b01ee35c9aCVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before 8f82fc3d72e5feb7a1efae94b51b431c5bf41c86CVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before 936b08d87c667031725bcc753007e7c1182548c6CVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before d0291fb4d91982d9f6a680bf759ff0555d351ecbCVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before fff917c85d37a294397c5440a795591ca9d6b602CVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before 549672a3fb6b36ea408238f89ecf9f41d2da6225CVE List
  • Linuxaffected: e57e780b346a7277fdd3bde765d9d8728b99bfa1 before d5559f43d76b398392b26a15cbc16d731969cd1cCVE List
  • Linuxaffected: 3.12CVE List
  • Linuxunaffected: all versions before 3.12CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7