CVE-2026-97430
kernel: xhci: Prevent queuing new commands if xhci is inaccessible
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 18, 2026
Description
A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface (xHCI) driver. When the host controller is inaccessible during power management operations, such as system suspend or resume, new commands are not properly prevented from being added to the command ring. A local user could trigger this condition to cause improper device state handling, potentially resulting in a Denial of Service (DoS) or system instability.
Statement
A low impact flaw was found in the Linux kernel USB eXtensible Host Controller Interface (xHCI) driver. When the host controller is marked inaccessible via HCD_FLAG_HW_ACCESSIBLE during power management operations, such as system suspend or resume, the driver does not prevent new commands from being queued on the command ring. A local user could trigger this condition to cause improper device state handling, potentially resulting in a denial of service or system instability. This issue affects the kernel in supported Red Hat Enterprise Linux streams (including ELS), Red Hat In-Vehicle Operating System, and OpenShift streams, where the fix has been deferred due to the low severity of the issue; the residual risk is limited to availability, as successful exploitation requires local access and precise timing during suspend/resume transitions. Red Hat Enterprise Linux 6 Extended Lifecycle Support is out of support scope for this issue. Although the Red Hat CVSS 3.1 base score is 5.5 (Moderate), the overall impact is rated Low because the flaw only affects availability, requires local privileges, and depends on a narrow timing window during power management transitions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-841 · Improper Enforcement of Behavioral Workflow