5.5

CVE-2026-31727: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-31727DEBIAN-CVE-2026-31727
Published 01-05-2026Last modified 19-06-2026
Open JSON

Vulnerability summary

CVE-2026-31727 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.16%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 12
OPENSUSE-SU-2026:21555-1SUSE-SU-2026:23066-1SUSE-SU-2026:23068-1SUSE-SU-2026:23193-1SUSE-SU-2026:23194-1SUSE-SU-2026:23221-1

Timeline

  1. 01-05-2026
    PublishedVulnerability first disclosed.
  2. 19-06-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo Commit ec35c1969650 ("usb: gadget: f_ncm: Fix net_device lifecycle with device_move") reparents the gadget device to /sys/devices/virtual during unbind, clearing the gadget pointer. If the userspace tool queries on the surviving interface during this detached window, this leads to a NULL pointer dereference. Unable to handle kernel NULL pointer dereference Call trace: eth_get_drvinfo+0x50/0x90 ethtool_get_drvinfo+0x5c/0x1f0 __dev_ethtool+0xaec/0x1fe0 dev_ethtool+0x134/0x2e0 dev_ioctl+0x338/0x560 Add a NULL check for dev->gadget in eth_get_drvinfo(). When detached, skip copying the fw_version and bus_info strings, which is natively handled by ethtool_get_drvinfo for empty strings.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.16%

Chance of exploitation in the next 30 days

Percentile

5%

Versus all other CVEs

30-day change

+0.04 pp

From 0.12% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.16%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu92 products
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
  • linux-aws-5.13All versions (No fix recorded)
  • linux-aws-5.19All versions (No fix recorded)
Linux2 products
  • linux≥ 7c97366f5dac5255e60a317ffe3a5b18f3745547, < f9f987472f4b8ab177be2b6492a59278ed969479 | ≥ 36c41e9724c9a7a7cda37f5a4e9d94f25c8031c4, < 7fce959e9be3bf63bb0fdf4b05f9cc42cb289fe2 | ≥ 93f116c3393a22acab96ad1bef12b2572eb80ca4, < 0326429e8ba99892e1d1e115dc8e88e1a3b64e24 | ≥ e584cb58a2ea7ff4d3a4bc43d5ca512ed3ecb77d, < a36e5e800b9c93e3e1ffa42f34d38b36775dbcee | ≥ 85acaba2f42b557499bab3608307f17bf13beb69, < 7de4d46be40738c7e48e64b5cc0a34aa1e047b0a | ≥ ec35c1969650e7cb6c8a91020e568ed46e3551b0, < e002e92e88e12457373ed096b18716d97e7bbb20 | ≥ 6.12.78, < 6.12.81 | ≥ 6.18.19, < 6.18.22 | ≥ 6.19.9, < 6.19.12
  • linux_kernel≥ 6.12.78, < 6.12.81 | ≥ 6.18.19, < 6.18.22 | ≥ 6.19.9, < 6.19.12 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6
Debian1 product
  • linux< 6.19.12-1

3 vendors · 95 products

References

10 links