CVE-2026-43255

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43255
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous transmission on this URB has completed. If a second call occurs while the URB is still active (e.g. during rapid firmware loading), usb_submit_urb() detects the active state and triggers a warning: 'URB submitted while active'. Fix this by enforcing serialization: call usb_kill_urb() before submitting the new request. This ensures the URB is idle and safe to reuse.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2902a9b4415a6bafc9b1e5dd360f065d757a0bb7 Patch
https://git.kernel.org/stable/c/3308c7504e093b22e91a4468470309cee2e26b83 Patch
https://git.kernel.org/stable/c/498525d8358d6d20918787e59736d5b6a021e9fd Patch
https://git.kernel.org/stable/c/5bfb25495e391a1be0db94b15715174fa06b93a1 Patch
https://git.kernel.org/stable/c/948a39c95d0f8d73722910f8cdb7b6e3e9206232 Patch
https://git.kernel.org/stable/c/b82073564373e68c6ae3a96039fae14cd002a496 Patch
https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622 Patch
https://git.kernel.org/stable/c/fc188b44547dea4e7350833171982a6312befde9 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

11 May 2026, 18:18

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/2902a9b4415a6bafc9b1e5dd360f065d757a0bb7 - () https://git.kernel.org/stable/c/2902a9b4415a6bafc9b1e5dd360f065d757a0bb7 - Patch
References () https://git.kernel.org/stable/c/3308c7504e093b22e91a4468470309cee2e26b83 - () https://git.kernel.org/stable/c/3308c7504e093b22e91a4468470309cee2e26b83 - Patch
References () https://git.kernel.org/stable/c/498525d8358d6d20918787e59736d5b6a021e9fd - () https://git.kernel.org/stable/c/498525d8358d6d20918787e59736d5b6a021e9fd - Patch
References () https://git.kernel.org/stable/c/5bfb25495e391a1be0db94b15715174fa06b93a1 - () https://git.kernel.org/stable/c/5bfb25495e391a1be0db94b15715174fa06b93a1 - Patch
References () https://git.kernel.org/stable/c/948a39c95d0f8d73722910f8cdb7b6e3e9206232 - () https://git.kernel.org/stable/c/948a39c95d0f8d73722910f8cdb7b6e3e9206232 - Patch
References () https://git.kernel.org/stable/c/b82073564373e68c6ae3a96039fae14cd002a496 - () https://git.kernel.org/stable/c/b82073564373e68c6ae3a96039fae14cd002a496 - Patch
References () https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622 - () https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622 - Patch
References () https://git.kernel.org/stable/c/fc188b44547dea4e7350833171982a6312befde9 - () https://git.kernel.org/stable/c/fc188b44547dea4e7350833171982a6312befde9 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-11 18:18

NVD link : CVE-2026-43255

Mitre link : CVE-2026-43255

CVE.ORG link : CVE-2026-43255

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo