CVE-2026-43170None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue context Currently dwc3_gadget_vbus_draw() can be called from atomic context, which in turn invokes power-supply-core API…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: gadget: Move vbus draw to workqueue context
Currently dwc3_gadget_vbus_draw() can be called from atomic context, which in turn invokes power-supply-core APIs. And some these PMIC APIs have operations that may sleep, leading to kernel panic.
Fix this by moving the vbus_draw into a workqueue context.
Linux >= 99288de36020c5a6976df77e53ac449b0f75c97f < b214f0b11a0f1186f83c284f6a545110f76066b6Linux >= 99288de36020c5a6976df77e53ac449b0f75c97f < 76c1123ffccfaba95cf4ecc2a50f95504a522424Linux >= 99288de36020c5a6976df77e53ac449b0f75c97f < a7a80c25b65112768eeba58a7af129d3c52a6d90Linux >= 99288de36020c5a6976df77e53ac449b0f75c97f < 2333653ef854c2cc124077f71a8526f03bf6e06aLinux >= 99288de36020c5a6976df77e53ac449b0f75c97f < 74a231e3d99d310497ab0ccb359539a6063b316aLinux >= 99288de36020c5a6976df77e53ac449b0f75c97f < 54aaa3b387c2f580a99dc86a9cc2eb6dfaf599a7Linux 5.13Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-43413Nonescsi: hisi_sas: Fix NULL pointer exception during user_scan()
CVE-2026-43490High· 8.8ksmbd: validate inherited ACE SID length
CVE-2026-43419Noneceph: fix memory leaks in ceph_mdsc_build_path()
CVE-2026-43271Nonemd-cluster: fix NULL pointer dereference in process_metadata_update
CVE-2026-43220Noneiommu/amd: serialize sequence allocation under concurrent TLB invalidations
CVE-2026-43129Noneima: verify the previous kernel's IMA buffer lies in addressable RAM