exploitDog

CVE-2026-43427

Опубликовано: 08 мая 2026

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

usb: class: cdc-wdm: fix reordering issue in read code path

Quoting the bug report:

Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1].

Fix it by using WRITE_ONCE and memory barriers.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 2.6.26.1 (включая) до 5.10.253 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.203 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.167 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.130 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.78 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.19 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.9 (исключая)

cpe:2.3:o:linux:linux_kernel:2.6.26:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc7:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc8:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:2.6.26:rc9:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*

EPSS

Процентиль: 3%

0.00132

Низкий

7.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2026-43427

CVSS3: 7.1

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

CVE-2026-43427

CVSS3: 5.5

redhat

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

CVE-2026-43427

CVSS3: 7.1

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: u ...

GHSA-jmm4-crvj-m7gx

CVSS3: 7.1

github

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

SUSE-SU-2026:3166-1

suse-cvrf

6 дней назад

Security update for the Linux Kernel

EPSS

Процентиль: 3%

0.00132

Низкий

7.1 High

CVSS3

Дефекты

CWE-125