Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43432

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_alloc_command() allocates a command structure and, when the second argument is true, also allocates a completion structure. Currently, the error handling path in xhci_disable_slot() only frees the command structure using kfree(), causing the completion structure to leak. Use xhci_free_command() instead of kfree(). xhci_free_command() correctly frees both the command struc
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b3bad7ff7bb92f5374a1c777b1684c8dd87bae88a6cfdd48f02bd718eedda0a2
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/host/xhci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/host/xhci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1e800e26d54ccf2ddf2ea6d6cbe021c804d8aa62","status":"affected","version":"fee8be5bde562d4f5f9a100ca80c6d7072ed34c8","versionType":"git"},{"lessThan":"6288baf0c8c4dcfbf206773aede9c1f2269cec28","status":"affected","version":"02d5a2a48bb44e7404b794df87e57588b2fd604e","versionType":"git"},{"lessThan":"46aea90763832cd6e9b0c2e1c00e6a9512156d4b","status":"affected","version":"7faac1953ed1f658f719cd…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/host/xhci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/host/xhci.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1e800e26d54ccf2ddf2ea6d6cbe021c804d8aa62","status":"affected","version":"fee8be5bde562d4f5f9a100ca80c6d7072ed34c8","versionType":"git"},{"lessThan":"6288baf0c8c4dcfbf206773aede9c1f2269cec28","status":"affected","version":"02d5a2a48bb44e7404b794df87e57588b2fd604e","versionType":"git"},{"lessThan":"46aea90763832cd6e9b0c2e1c00e6a9512156d4b","status":"affected","version":"7faac1953ed1f658f719cd…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/078b446efc0f5e496c31bccb72b98af979963a83"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/1e800e26d54ccf2ddf2ea6d6cbe021c804d8aa62"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/2e2baa8fb5aa4d080cbfeb84c51eff797529f413"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/46aea90763832cd6e9b0c2e1c00e6a9512156d4b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/6288baf0c8c4dcfbf206773aede9c1f2269cec28"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/807e4fb5140c73eb5dba1e399a990db5c1f3cdf8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/c1c8550e70401159184130a1afc6261db01fc0ce"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/c65f1b840ab8ce72ba68f1b63bab7960f8fdfa89"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:dc00845ca096587f08b1e84d8a050d6ecd90ba6bca44e7fe0a9cb9727ee4c279 · sha256:a4f74a357c444675… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer