CVE-2026-45911

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: cdns3: fix role switching during resume

If the role change while we are suspended, the cdns3 driver switches to the

new mode during resume. However, switching to host mode in this context

causes a NULL pointer dereference.

The host role's start() operation registers a xhci-hcd device, but its

probe is deferred while we are in the resume path. The host role's resume()

operation assumes the xhci-hcd device is already probed, which is not the

case, leading to the dereference. Since the start() operation of the new

role is already called, the resume operation can be skipped.

So skip the resume operation for the new role if a role switch occurs

during resume. Once the resume sequence is complete, the xhci-hcd device

can be probed in case of host mode.

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000208

Mem abort info:

...

Data abort info:

...

[0000000000000208] pgd=0000000000000000

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References