Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43430

usb: yurex: fix race in probe

Description

In the Linux kernel, the following vulnerability has been resolved: usb: yurex: fix race in probe The bbu member of the descriptor must be set to the value standing for uninitialized values before the URB whose completion handler sets bbu is submitted. Otherwise there is a window during which probing can overwrite already retrieved data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < a7934d7202a39c3160aa30521c382c7b744ae4a2affected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < a8b3b3d730acea1640bc89465f2832cf06a1e13aaffected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < 687d26d43a5aaf44323ce7d601cf242bb87e9559affected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < 939e3d17b843b0bae70467fef4481069d73c8520affected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < 3cec135415a89723e2d38e1c8cc5098203355965affected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < a41d3d9202e951995cfac6248c565423079c71faaffected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < af83e92c329f11139d5eea2b5b7b83c26c3f67e7affected
  • 6bc235a2e24a5ef677daee3fd4f74f6cd643e23c to < 7a875c09899ba0404844abfd8f0d54cdc481c151affected

Linux Linux

Default version status: affected

  • 2.6.37affected
  • 0 to < 2.6.37unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References