usb gadget security

  1. CVE-2026-31616: Linux USB Gadget Phonet Overflow—Patch & Fleet Review for Mixed Setups

    CVE-2026-31616 is a narrowly scoped but technically important Linux kernel vulnerability in the USB gadget subsystem, where a hostile USB host can trigger a fragment-array overflow in the Phonet gadget receive path. The flaw sits in f_phonet, a legacy but still shipped kernel function used to...