The vulnerability exists in the Linux kernel’s usb cdns3 driver. During a resume operation the driver may switch to host mode while still suspended. The code incorrectly assumes that the xhci‑hcd device has been probed, resulting in a null pointer dereference. This leads to a kernel Oops and system crash, denying availability. The weakness is a null pointer dereference (CWE‑476).

The problem affects Linux kernel builds that include the cdns3 USB controller driver, such as the 6.19.0‑rc7 kernel used on the Texas Instruments J7200 EVM. Any system that uses the Cadence CDNS3 USB controller and can suspend/resume with a role change is vulnerable. No specific product name is listed beyond the generic Linux kernel, but devices with the cdns3 driver (e.g., embedded ARM boards) are impacted.

The CVSS and EPSS scores are not published, and the vulnerability is not in the CISA KEV catalog. Because the flaw manifests during a local suspend/resume sequence and requires a role switch, the attack vector is local with high availability impact. Exploitation is limited to the host system and would cause a kernel crash. The absence of an EPSS metric means the exploit probability is currently unknown.