Riskcovery

CVE-2026-43170

usb: dwc3: gadget: Move vbus draw to workqueue context

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: gadget: Move vbus draw to workqueue context

Currently dwc3_gadget_vbus_draw() can be called from atomic context, which in turn invokes power-supply-core APIs. And some these PMIC APIs have operations that may sleep, leading to kernel panic.

Fix this by moving the vbus_draw into a workqueue context.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before b214f0b11a0f1186f83c284f6a545110f76066b6Affected
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before 76c1123ffccfaba95cf4ecc2a50f95504a522424Affected
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before a7a80c25b65112768eeba58a7af129d3c52a6d90Affected
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before 2333653ef854c2cc124077f71a8526f03bf6e06aAffected
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before 74a231e3d99d310497ab0ccb359539a6063b316aAffected
  • 99288de36020c5a6976df77e53ac449b0f75c97f to before 54aaa3b387c2f580a99dc86a9cc2eb6dfaf599a7Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.