CVE Explorer

CVE-2026-43425

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: kill download URB on timeout mdc800_device_read() submits download_urb and waits for completion. If the timeout fires and the device has not responded, the function returns without killing the URB, leaving it active. A subsequent read() resubmits the same URB while it is still in-flight, triggering the WARN in usb_submit_urb(): "URB submitted while active" Check the return value of wait_event_timeout()

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:41c224860677fae122f1d59f94628ca943bfa11fdc3bc7095a5d138b6bbf0cb3

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/image/mdc800.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9fa5a49760979ba016506fe292a431c8b83f043e","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"15536f6c15f48037a1672cbdea53266d67861ff6","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"9bf877cc67309b2a063b0087c3ad8585fb11cec3","status":"affected","version":"1da177e4c3f41524e88…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/image/mdc800.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/15536f6c15f48037a1672cbdea53266d67861ff6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/155f471e38aa516f6c58c2ae03ca3dc222fa2fdb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/1be3b77de4eb89af8ae2fd6610546be778e25589"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/9bf877cc67309b2a063b0087c3ad8585fb11cec3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/9fa5a49760979ba016506fe292a431c8b83f043e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/b7fed917f84e484e06c5e9926746d0b524e3a93e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/cc7398447810c9450c90d092efe9997569f8d96f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/d4a400a6a4c4d49f77a04a3f401df5ae1a10657c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:722bd2b744b0dbb75e3de36add7454da2665bd817ed44809c7cb64837baba181 · sha256:10779a4351d129f5… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer