{"id":"CVE-2026-97483","revision":"c24df6e5cfb94ab6843ff7cc4e75dc54","records":[{"revision":"c24df6e5cfb94ab6843ff7cc4e75dc54","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-97483","aliases":[],"title":"usb: core: hcd: fix possible deadlock in rh control transfers","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: hcd: fix possible deadlock in rh control transfers\n\n>From within the SCSI error handler memory allocations must not\ntrigger IO. Handling errors in UAS and the storage driver may\ninvolve resetting a device. The thread doing the reset itself\nrelies on VM magic. However, that is insufficient, as resetting\na device involves resuming it. Resumption as well as resetting\ninvolves conrol transfers to the parent of the device to be reset.\nThat may be a root hub. Hence usbcore must heed the flags passed\nto usb_submit_urb() processing control transfers to root hubs.\n\nThe problem exist since the storage driver has been merged.","state":0,"publishedAt":"2026-09-24T16:04:27.07+00:00","modifiedAt":"2026-10-03T10:58:47.463+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/usb/core/hcd.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"8461eda5af77c44d216cec66455bd5b01ee35c9a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"8f82fc3d72e5feb7a1efae94b51b431c5bf41c86\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"936b08d87c667031725bcc753007e7c1182548c6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"d0291fb4d91982d9f6a680bf759ff0555d351ecb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"fff917c85d37a294397c5440a795591ca9d6b602\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"549672a3fb6b36ea408238f89ecf9f41d2da6225\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e57e780b346a7277fdd3bde765d9d8728b99bfa1\",\n                            \"lessThan\": \"d5559f43d76b398392b26a15cbc16d731969cd1c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/usb/core/hcd.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.271\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.222\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.189\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.158\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.111\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.53\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/8461eda5af77c44d216cec66455bd5b01ee35c9a","https://git.kernel.org/stable/c/8f82fc3d72e5feb7a1efae94b51b431c5bf41c86","https://git.kernel.org/stable/c/936b08d87c667031725bcc753007e7c1182548c6","https://git.kernel.org/stable/c/d0291fb4d91982d9f6a680bf759ff0555d351ecb","https://git.kernel.org/stable/c/fff917c85d37a294397c5440a795591ca9d6b602","https://git.kernel.org/stable/c/549672a3fb6b36ea408238f89ecf9f41d2da6225","https://git.kernel.org/stable/c/d5559f43d76b398392b26a15cbc16d731969cd1c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-97483","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-97483","identifiers":["CVE-2026-97483"]},"retained":false,"historicalAffected":[]}],"coverage":[]}