PT-2026-39013 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43352

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Flaws exist in the DMA dequeue logic of the mipi-i3c-hci driver regarding the handling of RING CTRL ABORT. The driver issues ring aborts unconditionally even if the ring has stopped, fails to re-initialize the completion used to wait for abort completion, and unintentionally clears RING CTRL ENABLE, which resets hardware ring pointers and disrupts the controller state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43352

Affected Products

Linux Kernel

References · 14

• https://git.kernel.org/stable/c/b795e68bf3073d67bebbb5a44d93f49efc5b8cc7 · Patch
• https://ubuntu.com/security/CVE-2026-43352 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43352 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43352 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43352 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43352 · Security Note
• https://git.kernel.org/stable/c/003df94bcc9227e8e930abd03ac7f63ac10033dc · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43352 · Vendor Advisory
• https://git.kernel.org/stable/c/5549611888f5ca2db5e8e692b57f30626ddf9898 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43352 · Security Note
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post
• https://twitter.com/CVEnew/status/2052811019257311502 · Twitter Post
• https://git.kernel.org/linus/b795e68bf3073d67bebbb5a44d93f49efc5b8cc7 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43352 · Note