CVE-2026-90023

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() Previously fsg_num_buffers_validate() was removed as it was not necessary due to Kconfig setting the limits for n from 2 to 256 with default as 2. However, setting the page content in such a way that kstrtou8() reflects n value as either 0 or 1 bypasses these restrictions leading to a null pointer dereference if n is 0. Fix this by adding a check for n < 2 and returning -EINVAL if n is either 0 or 1 consistent with Kconfig logic.

• https://git.kernel.org/stable/c/2c0f5ca48674a5b5f9fa4a9c3325aa48053af0bc
• https://git.kernel.org/stable/c/9e8dd2a7a8ccbb756771ad985b0ad3387ed3c957
• https://git.kernel.org/stable/c/b9b5b5df5b8dd3c1572ed267200276a44cc67d8e

Published

Sep 16, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90018In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-90019In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9002IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 could al…6.5
• CVE-2026-90020In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90021In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90022In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-90024In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90025In the Linux kernel, the following vulnerability has been re…7.7
• CVE-2026-90026In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-90027In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-90028In the Linux kernel, the following vulnerability has been re…
• CVE-2026-90029In the Linux kernel, the following vulnerability has been re…