CVE-2026-43255None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous transmission on this URB has completed…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
wifi: libertas: fix WARNING in usb_tx_block
The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous transmission on this URB has completed. If a second call occurs while the URB is still active (e.g. during rapid firmware loading), usb_submit_urb() detects the active state and triggers a warning: 'URB submitted while active'.
Fix this by enforcing serialization: call usb_kill_urb() before submitting the new request. This ensures the URB is idle and safe to reuse.
Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < 498525d8358d6d20918787e59736d5b6a021e9fdLinux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < 2902a9b4415a6bafc9b1e5dd360f065d757a0bb7Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < 948a39c95d0f8d73722910f8cdb7b6e3e9206232Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < 5bfb25495e391a1be0db94b15715174fa06b93a1Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < b82073564373e68c6ae3a96039fae14cd002a496Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < 3308c7504e093b22e91a4468470309cee2e26b83Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < fc188b44547dea4e7350833171982a6312befde9Linux >= 876c9d3aeb989cf1961f2c228d309ba5dcfb1172 < d66676e6ca96bf8680f869a9bd6573b26c634622Linux 2.6.22Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses