EIP-2026-102658

This advisory details a null-pointer dereference vulnerability in the Linux kernel's cypress_m8 USB driver, leading to a local DoS via a malformed USB device descriptor. The analysis includes root cause, affected code paths, and a proof-of-concept using an Arduino Leonardo firmware.