SB20260928271 - Use of Uninitialized Variable in Linux kernel usb usx2y

Description

This security bulletin contains information about 1 vulnerability.

1) Use of Uninitialized Variable (CVE-ID: CVE-2026-97929)

CWE-ID: CWE-457 - Use of Uninitialized Variable

CVSSv4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows an attacker with physical access to disclose sensitive information.

The vulnerability exists due to use of uninitialized heap data in the i_usx2y_in04_int() interrupt callback when handling a short transfer from a USB device. An attacker with physical access can cause a short transfer to disclose sensitive information.

The uninitialized data is copied to the mmap-accessible ctl_snapshot[] array.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2770321b358658e0a39fe39ccf6a91ee97a81931
• https://git.kernel.org/stable/c/8f5ef203abda9dd36b2af473c7b737d544f807bd
• https://git.kernel.org/stable/c/b0c30fe6c0d5902bd8a7d1d5720bead5bbe46f7d
• https://git.kernel.org/stable/c/c156584999bf15118f523ef6c6fedc5b21f46bd9