CVE-2026-64233 | Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11 UVC Gadget uvc_configfs.c uvc_function_bind null pointer dereference

July 24, 2026 Yanac

A vulnerability was found in Linux Kernel up to 6.6.142/6.12.92/6.18.34/7.0.11. It has been classified as critical. The impacted element is the function uvc_function_bind of the file drivers/usb/gadget/function/uvc_configfs.c of the component UVC Gadget. The manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-64233. The attack needs to be performed locally. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More