PT-2026-38991 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43340

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the COMEDI subsystem, the struct comedi device contains a spinlock member intended for use by low-level drivers. Certain COMEDI devices can be attached to different low-level drivers during their lifetime via the 'COMEDI DEVCONFIG' ioctl command. This process can lead to inconsistent lock states if there is a mismatch in the spin-lock locking levels used by the successive low-level drivers. The issue occurs specifically when CONFIG LOCKDEP (a lock dependency validator) is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43340

Affected Products

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/4b9a9a6d71e3e252032f959fb3895a33acb5865c · Patch
• https://git.kernel.org/stable/c/b89c026227712c367950bbae055a5b31073d3b30 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43340 · Security Note
• https://ubuntu.com/security/CVE-2026-43340 · Vendor Advisory
• https://git.kernel.org/stable/c/430291d8f3884f57ae0057049b0ca291453e29e1 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43340 · Vendor Advisory
• https://git.kernel.org/stable/c/2b1f49e4fdff3ef0f8e9158bbb5b149e06287560 · Patch
• https://git.kernel.org/stable/c/3181c34b415c5464be9d34bff3e43ef63b747039 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43340 · Vendor Advisory
• https://git.kernel.org/stable/c/83134a7a176ce5b4b19b6edecf4360e8d98d1a5a · Patch
• https://git.kernel.org/stable/c/c01bcc67a9a692d65508ebd480405b5e77d562b7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43340 · Vendor Advisory
• https://git.kernel.org/stable/c/4d5ffe524903a30e2e0da7d16841a56bec2de55c · Patch
• https://cve.org/CVERecord?id=CVE-2026-43340 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43340 · Vendor Advisory