CVE-2026-43327

kernel: USB: dummy-hcd: Fix locking/synchronization error

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's USB dummy-hcd driver. A race condition between a USB reset operation and a driver unbind operation can lead to a synchronization error. This allows a local attacker with physical access to a USB device to trigger an addressing exception, causing a system crash and resulting in a Denial of Service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition