PT-2026-38975 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43324

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An interrupt synchronization error exists in the dummy-hcd driver. The emulated synchronize irq() function, which ensures all current handler callbacks have returned, was executing before the emulated interrupt-disable process. This sequence allowed emulated interrupts to occur after the synchronization had run, potentially resulting in a callback handler executing while the gadget driver was being unbound.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43324

Affected Products

Linux Kernel

References · 18

• https://git.kernel.org/stable/c/5aa776c8615bea3b1eaeec87b0788375800ead4f · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43324 · Vendor Advisory
• https://git.kernel.org/stable/c/8bcd80219d8e10e660bf29b20e41bb8beb4e4cb7 · Patch
• https://git.kernel.org/stable/c/d847f375b1bcea713143bc02720d13d2d01b012a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43324 · Security Note
• https://ubuntu.com/security/CVE-2026-43324 · Vendor Advisory
• https://git.kernel.org/stable/c/2ca9e46f8f1f5a297eb0ac83f79d35d5b3a02541 · Patch
• https://git.kernel.org/stable/c/94d4fab1dd9e64f45449bcc7d6a5acf796b13015 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43324 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43324 · Vendor Advisory
• https://git.kernel.org/stable/c/5687a09776069bd915560021c9728ca528440128 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43324 · Vendor Advisory
• https://git.kernel.org/stable/c/cbf7df5e5d27cd5bea92ee9a75a4b28dbcc718d4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43324 · Vendor Advisory
• https://twitter.com/CVEnew/status/2052811058138526206 · Twitter Post