CVE-2026-43427

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43427
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43427.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43427
Downstream
Published
2026-05-08T14:22:00.345Z
Modified
2026-05-28T03:55:42.388315039Z
Summary
usb: class: cdc-wdm: fix reordering issue in read code path
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: class: cdc-wdm: fix reordering issue in read code path

Quoting the bug report:

Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdmread() can see the new length and call copyto_user() on uninitialized memory. This also violates LKMM data race rules [1].

Fix it by using WRITE_ONCE and memory barriers.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43427.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
afba937e540c902c989cd516fd97ea0c8499bb27
Fixed
638328ca9c17ae6511ad62198c57bae32ffa3c91
Fixed
170e8daca24da6edb4be82ab01abf44e87af387b
Fixed
c8fa96ed021923dae147bcd9f9205b8df7b82360
Fixed
4ee3062bf2c9a722afef429826e8607eaf3fc6a0
Fixed
276aef0fd2b92f41b920ac891c72cadeee957934
Fixed
67ed312124bb1b61858778ac0b985b48961c862a
Fixed
e3c874b05901dc519054b5107d16620e6d2b5fea
Fixed
8df672bfe3ec2268c2636584202755898e547173

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43427.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.26
Fixed
5.10.253
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.78
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43427.json"