PT-2026-37520 · Linux · Linux Kernel
Published
2026-05-06
·
Updated
2026-06-05
·
CVE-2026-43180
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the
kaweth set rx mode() function, which serves as the ndo set rx mode callback. This function incorrectly calls netif stop queue() and netif wake queue(), which are TX queue flow control functions unrelated to RX multicast configuration. The premature call to netif wake queue() can re-enable transmission while a tx urb is still in-flight, resulting in a double usb submit urb() call on the same USB Request Block (URB). This sequence triggers a warning indicating that the URB was submitted while still active. Additionally, kaweth set rx mode() is functionally broken as the actual action is performed by kaweth async set rx mode().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel