CVE-2026-23290

Published: Mar 25, 2026Modified: May 29, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not have the same urbs the driver will crash later on when it blindly accesses these endpoints.

Affected (13)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.12.1 to 5.10.253
Linux Linux Kernel	From 5.11 to 5.15.203
Linux Linux Kernel	From 5.16 to 6.1.167
Linux Linux Kernel	From 6.13 to 6.18.17
Linux Linux Kernel	From 6.19 to 6.19.7
Linux Linux Kernel	From 6.2 to 6.6.130
Linux Linux Kernel	From 6.7 to 6.12.77
Linux Linux Kernel	Version 2.6.12
Linux Linux Kernel	Version 2.6.12 rc2
Linux Linux Kernel	Version 2.6.12 rc3
Linux Linux Kernel	Version 2.6.12 rc4
Linux Linux Kernel	Version 2.6.12 rc5
Linux Linux Kernel	Version 7.0 rc1