01 Record

CVE-2026-31615

usb: gadget: renesas_usb3: validate endpoint index in standard request handlers

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

usb: gadget: renesas_usb3: validate endpoint index in standard request handlers

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.6% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-24 14:42Z4 MO AGO

Last updated

2026-06-14 17:42Z2 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-1285Improper Validation of Specified Index, Position, or Offset in InputBase

Data version

5.2

Document digest

28690889a9864db6a94f8f439925a788f8dd912bfa328a593edfc1e7bf115e42

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux746bfe63bba37ad55956b7377c9af494e7e28929 to < 7caaf76207f50c77abfd788380e19b2c23a94415, 746bfe63bba37ad55956b7377c9af494e7e28929 to < c4e5ae6db2328d2d9ed55d3005a36c13faab0752, 746bfe63bba37ad55956b7377c9af494e7e28929 to < 360aa6e71870a175a6d86af905be2ca171639eb3, 746bfe63bba37ad55956b7377c9af494e7e28929 to < 1b2bfedccc4fb8c9572e1ea464f905424c91de2a, 746bfe63bba37ad55956b7377c9af494e7e28929 to < adb8014599fdf0818d3d93f1f74e06cd0bdec08d, 746bfe63bba37ad55956b7377c9af494e7e28929 to < 44216e3dd4455b798899b50eedb0ec3831dff8e0, 746bfe63bba37ad55956b7377c9af494e7e28929 to < 37f430b2240655e6b0199a92aa1057e4d621be51, 746bfe63bba37ad55956b7377c9af494e7e28929 to < e3d42598f2995cdc07b7779874e7c5f8a1b773db, 746bfe63bba37ad55956b7377c9af494e7e28929 to < f880aac8a57ebd92abfa685d45424b2998ac1059, 4.5—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7caaf76207f50c77abfd788380e19b2c23a94415
git.kernel.orghttps://git.kernel.org/stable/c/c4e5ae6db2328d2d9ed55d3005a36c13faab0752
git.kernel.orghttps://git.kernel.org/stable/c/360aa6e71870a175a6d86af905be2ca171639eb3
git.kernel.orghttps://git.kernel.org/stable/c/1b2bfedccc4fb8c9572e1ea464f905424c91de2a
git.kernel.orghttps://git.kernel.org/stable/c/adb8014599fdf0818d3d93f1f74e06cd0bdec08d
git.kernel.orghttps://git.kernel.org/stable/c/44216e3dd4455b798899b50eedb0ec3831dff8e0
git.kernel.orghttps://git.kernel.org/stable/c/37f430b2240655e6b0199a92aa1057e4d621be51
git.kernel.orghttps://git.kernel.org/stable/c/e3d42598f2995cdc07b7779874e7c5f8a1b773db
git.kernel.orghttps://git.kernel.org/stable/c/f880aac8a57ebd92abfa685d45424b2998ac1059

01 Record index

CVE-2026-31615

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31615

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References