CVE-2026-43415
kernel: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 8, 2026
Updated · July 2, 2026
Description
A flaw was found in the Linux kernel's Universal Flash Storage (UFS) host controller driver (scsi: ufs: core). A race condition exists during the UFS suspend process, where a timing issue can cause critical operations to execute out of sequence. This can lead to an Asynchronous SError Interrupt and a kernel panic, resulting in a Denial of Service (DoS).
Statement
A Moderate flaw was found in the Linux kernel's Universal Flash Storage (UFS) host controller driver. A race condition during UFS suspend can lead to a kernel panic, resulting in a Denial of Service. This issue requires local access and specific hardware configurations to trigger, limiting its impact on standard Red Hat Enterprise Linux installations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread