CVE-2026-43429None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses thes…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts
The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usb_bulk_msg() calls. Since the user can specify arbitrarily long timeouts and usb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable() instead to avoid the possibility of the user hanging a kernel thread indefinitely.
Linux >= 048c6d88a0214757926f264823829e79154fcd4f < e14a0dcdf468c3ad616bb06696c7c64c36e736d8Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 7fa72c369c23c27d1f64883c1e276af950557fb1Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 72c0a063489be183cfb99e7050aaef503bdb6449Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 39bd4097292fd8564cf2cfba9356f8ab11e38d12Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 0535f84cb94c9d8bcba0a2a5b3fac81b7d97235dLinux >= 048c6d88a0214757926f264823829e79154fcd4f < 6cb7dc91f057dd8ce44f6caa2995d8e22784ed0aLinux >= 048c6d88a0214757926f264823829e79154fcd4f < d4f1c45bdff3f393f9ab7e76795901c442b9eb76Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 7784caa413a89487dd14dd5c41db8753483b2acbLinux 4.19Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses