Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43327

In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix locking/synchronization error Syzbot testing was able to provoke an addressing exception and crash in the usb_gadget_udc_reset() routine in drivers/usb/gadgets/udc/core.c, resulting from the fact that the routine was called with a second ("driver") argument of NULL. The bad caller was set_link_state() in dummy_hcd.c, and the problem arose because of a race between a USB reset and driver unbind. These sort
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:39db5c52f26d170e6ff66acd83859023318ddc8ab05530659a939b0f90b9f2ff
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/udc/dummy_hcd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/udc/dummy_hcd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6350c7dd33ab481ef41c931a238361490c32d15c","status":"affected","version":"7dbd8f4cabd96db5a50513de9d83a8105a5ffc81","versionType":"git"},{"lessThan":"cc97fb5969177cccce2e23b31298df220fc7570d","status":"affected","version":"7dbd8f4cabd96db5a50513de9d83a8105a5ffc81","versionType":"git"},{"lessThan":"218886b2ef2dea7627d3700ab0abaf4bf9d1161f","status":"affected","version":"7dbd8f4cabd…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/udc/dummy_hcd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/udc/dummy_hcd.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6350c7dd33ab481ef41c931a238361490c32d15c","status":"affected","version":"7dbd8f4cabd96db5a50513de9d83a8105a5ffc81","versionType":"git"},{"lessThan":"cc97fb5969177cccce2e23b31298df220fc7570d","status":"affected","version":"7dbd8f4cabd96db5a50513de9d83a8105a5ffc81","versionType":"git"},{"lessThan":"218886b2ef2dea7627d3700ab0abaf4bf9d1161f","status":"affected","version":"7dbd8f4cabd…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/218886b2ef2dea7627d3700ab0abaf4bf9d1161f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/616a63ff495df12863692ab3f9f7b84e3fa7a66d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/6350c7dd33ab481ef41c931a238361490c32d15c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/69ab97a693251d6a6093e630060a3c744fd58524"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/791966f85b439b261bf19865cf1c07c065ffb4b4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/805b1833d6ed6da5086e610578a28e71bb54fbbb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/cc97fb5969177cccce2e23b31298df220fc7570d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/efbd9441f1e769a7aae1813d497cec09cbdff031"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d105fc20801a4fe197bc0228adf6d85fdb1c80c212c9d6d177a1b059a0579dfa · sha256:5064f5a4b933f4d4… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer