CVE-2026-97483

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97483
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97483.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97483
Downstream
Published
2026-09-24T16:04:27Z
Modified
2026-10-05T02:30:55Z
Summary
usb: core: hcd: fix possible deadlock in rh control transfers
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: core: hcd: fix possible deadlock in rh control transfers

From within the SCSI error handler memory allocations must not trigger IO. Handling errors in UAS and the storage driver may involve resetting a device. The thread doing the reset itself relies on VM magic. However, that is insufficient, as resetting a device involves resuming it. Resumption as well as resetting involves conrol transfers to the parent of the device to be reset. That may be a root hub. Hence usbcore must heed the flags passed to usb_submit_urb() processing control transfers to root hubs.

The problem exist since the storage driver has been merged.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97483.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e57e780b346a7277fdd3bde765d9d8728b99bfa1
Fixed
8461eda5af77c44d216cec66455bd5b01ee35c9a
Fixed
8f82fc3d72e5feb7a1efae94b51b431c5bf41c86
Fixed
936b08d87c667031725bcc753007e7c1182548c6
Fixed
d0291fb4d91982d9f6a680bf759ff0555d351ecb
Fixed
fff917c85d37a294397c5440a795591ca9d6b602
Fixed
549672a3fb6b36ea408238f89ecf9f41d2da6225
Fixed
d5559f43d76b398392b26a15cbc16d731969cd1c

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97483.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.12.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97483.json"