CyberRota Analysis
AI-GeneratedA null pointer dereference vulnerability exists in the Linux kernel's USB gadget subsystem, specifically within the uvcg_video_init() function. If the kthread_run_worker() call fails, it could lead to a crash due to an uninitialized pointer being accessed. Organizations using affected Linux systems, particularly those relying on USB video class devices, should prioritize applying updates to mitigate potential system instability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init() In uvcg_video_init(), if kthread_run_worker() fails, the error logged uses uvcg_err(), however, the pointer it uses: video->uvc is not assigned at this point, triggering a null pointer dereference. Fix this by directly using uvc->func which is assigned already.