CVE-2026-43428

MEDIUM EPSS 2.4%
Published May 8, 20261mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchronous timeouts The usb_control_msg(), usb_bulk_msg(), and usb_interrupt_msg() APIs in usbcore allow unlimited timeout durations. And since they use uninterruptible waits, this leaves open the possibility of hanging a task for an indefinitely long time, with no way to kill it short of unplugging the target device. To prevent this sort of problem, enforce a maximum limit on the length of these unkillable timeouts. The limit chosen here, somewhat arbitrarily, is 60 seconds. On many systems (although not all) this is short enough to avoid triggering the kernel's hung-task detector. In addition, clear up the ambiguity of negative timeout values by treating them the same as 0, i.e., using the maximum allowed timeout.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 16

VendorProductVersionRange
linuxlinux_kernel*≥2.6.12.1  –  <5.10.253
linuxlinux_kernel*≥5.11  –  <5.15.203
linuxlinux_kernel*≥5.16  –  <6.1.167
linuxlinux_kernel*≥6.2  –  <6.6.130
linuxlinux_kernel*≥6.7  –  <6.12.78
linuxlinux_kernel*≥6.13  –  <6.18.19
linuxlinux_kernel*≥6.19  –  <6.19.9
linuxlinux_kernel2.6.12any
linuxlinux_kernel2.6.12any
linuxlinux_kernel2.6.12any
linuxlinux_kernel2.6.12any
linuxlinux_kernel2.6.12any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/06d2bbc4c66c6b0e8a43728c4949026026a5be67
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1015c27a5e1a63efae2b18a9901494474b4d1dc3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/24b31a227f679a942d820840a4dea7f0c09a387f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2d34cb4d1d6283b4be9c78f4a83ed6956d3069ec
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e86f5b79e62ded7e3c3ebd688cf5775e618148a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/64f3d75633aedc12bdff220e9a4337177430bd9d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/659c0c7d50a4b0f6aa197c4c098cfd91daf63862
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6c62935670acdbb7687ced20494923b66fbb0367
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/06d2bbc4c66c6b0e8a43728c4949026026a5be67
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1015c27a5e1a63efae2b18a9901494474b4d1dc3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/24b31a227f679a942d820840a4dea7f0c09a387f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/2d34cb4d1d6283b4be9c78f4a83ed6956d3069ec
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4e86f5b79e62ded7e3c3ebd688cf5775e618148a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/64f3d75633aedc12bdff220e9a4337177430bd9d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/659c0c7d50a4b0f6aa197c4c098cfd91daf63862
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/6c62935670acdbb7687ced20494923b66fbb0367
    Patch