CVE Database›Document archive›CVE-2026-43250

CVE-2026-43250

kernel: usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 6, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's ChipIdea USB Device Controller (UDC) driver. A local user with a malicious USB device, or a malicious USB device itself, could exploit this by reconnecting the device during an active data transfer. This improper cleanup of Direct Memory Access (DMA) buffers can lead to the reuse of stale DMA states. Consequently, this can result in memory corruption, potentially causing system instability, crashes, or even arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-459 · Incomplete Cleanup