CVE-2026-43250
kernel: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 6, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's ChipIdea USB Device Controller (UDC) driver. A local user with a malicious USB device, or a malicious USB device itself, could exploit this by reconnecting the device during an active data transfer. This improper cleanup of Direct Memory Access (DMA) buffers can lead to the reuse of stale DMA states. Consequently, this can result in memory corruption, potentially causing system instability, crashes, or even arbitrary code execution.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-459 · Incomplete Cleanup