PT-2026-39087 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-20 · CVE-2026-43426

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the renesas usbhs driver. In the usbhs remove() function, the driver releases resources, including the pipe array, while the interrupt handler usbhs interrupt() remains registered. If an interrupt occurs after usbhs pipe remove() is executed but before the driver is completely unbound, the Interrupt Service Routine (ISR)—a specialized function that handles hardware interrupts—may access memory that has already been freed.

Recommendations Call devm free irq() before freeing resources to ensure the interrupt handler is disabled and synchronized before usbhs pipe remove() is called.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-43426

Affected Products

Linux Kernel

References · 18

• https://security-tracker.debian.org/tracker/CVE-2026-43426 · Vendor Advisory
• https://git.kernel.org/stable/c/c7012fc73dab4829404fedeeaa8531f12ac8545f · Patch
• https://git.kernel.org/stable/c/1899edac312ef17a7234851686e8a703f56d0a84 · Patch
• https://git.kernel.org/stable/c/9c6159d5b72d5fc265cce5da04f27d730b552e69 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43426 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43426 · Vendor Advisory
• https://git.kernel.org/stable/c/6287e0c01ccb818e7214f88d885ffb7c9e81b0e0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43426 · Security Note
• https://git.kernel.org/stable/c/51afaf919bbaacdd9cc9e146033ae0a743a42dd7 · Patch
• https://ubuntu.com/security/CVE-2026-43426 · Vendor Advisory
• https://git.kernel.org/stable/c/3cbc242b88c607f55da3d0d0d336b49bf1e20412 · Patch
• https://git.kernel.org/stable/c/0b7d11fd6e742ecc0b1eca44b4f0b93140c74bae · Patch
• https://cve.org/CVERecord?id=CVE-2026-43426 · Security Note
• https://git.kernel.org/stable/c/6ffe44f022c95b1b29c691d2169c5abc046f7580 · Patch
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post