Threats tagged 'ghsa-8r63-5629-3mpc'

CVE-2026-31721 is a medium severity vulnerability in the Linux kernel's USB gadget HID function. It involves improper initialization of wait queues in the f_hid driver during the bind operation, which can lead to list corruption when debug list checking is enabled. The issue occurs when binding and unbinding the USB device controller (UDC) while using file descriptors with epoll operations. The fix moves initialization of these queues from the bind function to the allocation function to ensure proper lifetime management.