CVE Database›Document archive›CVE-2026-43415

CVE-2026-43415

kernel: scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · May 8, 2026

Updated · July 2, 2026

Description

A flaw was found in the Linux kernel's Universal Flash Storage (UFS) host controller driver (scsi: ufs: core). A race condition exists during the UFS suspend process, where a timing issue can cause critical operations to execute out of sequence. This can lead to an Asynchronous SError Interrupt and a kernel panic, resulting in a Denial of Service (DoS).

Statement

A Moderate flaw was found in the Linux kernel's Universal Flash Storage (UFS) host controller driver. A race condition during UFS suspend can lead to a kernel panic, resulting in a Denial of Service. This issue requires local access and specific hardware configurations to trigger, limiting its impact on standard Red Hat Enterprise Linux installations.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 · Race Condition within a Thread