{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.6-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: goku_udc: avoid NULL deref of dev-\u003edriver in INT_USBRESET log  goku_irq() handles a number of bus events under a single ep0 path. It already guards the gadget driver suspend/resume callbacks against a NULL -\u003edriver:  \tif (dev-\u003egadget.speed != USB_SPEED_UNKNOWN \t\t\t\u0026\u0026 dev-\u003edriver \t\t\t\u0026\u0026 dev-\u003edriver-\u003eresume) { \t\tspin_unlock(\u0026dev-\u003elock); \t\tdev-\u003edriver-\u003eresume(\u0026dev-\u003egadget); \t\t... \t}  but the very next branch unconditionally dereferences dev-\u003edriver when an INT_USBRESET arrives:  \tif (stat \u0026 INT_USBRESET) { \t\tACK(INT_USBRESET); \t\tINFO(dev, \"USB reset done, gadget %s\\n\", \t\t\tdev-\u003edriver-\u003edriver.name); \t}  If the controller raises INT_USBRESET before any gadget driver has been bound (or after one has been unbound), dev-\u003edriver is NULL and the printk dereferences NULL.  smatch flags the inconsistency:    drivers/usb/gadget/udc/goku_udc.c:1618 goku_irq() error:   we previously assumed 'dev-\u003edriver' could be null (see line 1607)  Fall back to a placeholder when the gadget driver is not bound.  No functional change while a gadget driver is bound.",
  "id": "DEBIAN-CVE-2026-97482",
  "modified": "2026-09-25T04:47:28.730460546Z",
  "published": "2026-09-24T17:17:25.707Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-97482"
    }
  ],
  "upstream": [
    "CVE-2026-97482"
  ]
}