---
id: CVE-2026-43429
title: 'USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts

  The usbtmc driver accepts timeout values specified by the user in an
  ioctl command, and uses thes…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    e14a0dcdf468c3ad616bb06696c7c64c36e736d8
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    7fa72c369c23c27d1f64883c1e276af950557fb1
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    72c0a063489be183cfb99e7050aaef503bdb6449
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    39bd4097292fd8564cf2cfba9356f8ab11e38d12
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    d4f1c45bdff3f393f9ab7e76795901c442b9eb76
  - >-
    Linux >= 048c6d88a0214757926f264823829e79154fcd4f <
    7784caa413a89487dd14dd5c41db8753483b2acb
  - Linux 4.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:38:19.264236Z'
published: '2026-05-08'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:53.553Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43429'
references:
  - url: 'https://git.kernel.org/stable/c/e14a0dcdf468c3ad616bb06696c7c64c36e736d8'
  - url: 'https://git.kernel.org/stable/c/7fa72c369c23c27d1f64883c1e276af950557fb1'
  - url: 'https://git.kernel.org/stable/c/72c0a063489be183cfb99e7050aaef503bdb6449'
  - url: 'https://git.kernel.org/stable/c/39bd4097292fd8564cf2cfba9356f8ab11e38d12'
  - url: 'https://git.kernel.org/stable/c/0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d'
  - url: 'https://git.kernel.org/stable/c/6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a'
  - url: 'https://git.kernel.org/stable/c/d4f1c45bdff3f393f9ab7e76795901c442b9eb76'
  - url: 'https://git.kernel.org/stable/c/7784caa413a89487dd14dd5c41db8753483b2acb'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.02024
ingestedAt: '2026-11-06T15:54:03.920Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts

The usbtmc driver accepts timeout values specified by the user in an
ioctl command, and uses these timeouts for some usb_bulk_msg() calls.
Since the user can specify arbitrarily long timeouts and
usb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable()
instead to avoid the possibility of the user hanging a kernel thread
indefinitely.

## Affected

- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < e14a0dcdf468c3ad616bb06696c7c64c36e736d8`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 7fa72c369c23c27d1f64883c1e276af950557fb1`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 72c0a063489be183cfb99e7050aaef503bdb6449`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 39bd4097292fd8564cf2cfba9356f8ab11e38d12`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < d4f1c45bdff3f393f9ab7e76795901c442b9eb76`
- `Linux >= 048c6d88a0214757926f264823829e79154fcd4f < 7784caa413a89487dd14dd5c41db8753483b2acb`
- `Linux 4.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.