CVE-2026-43255

{"id": "CVE-2026-43255", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43255", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:31:33.518669Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "498525d8358d6d20918787e59736d5b6a021e9fd", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "2902a9b4415a6bafc9b1e5dd360f065d757a0bb7", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "948a39c95d0f8d73722910f8cdb7b6e3e9206232", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "5bfb25495e391a1be0db94b15715174fa06b93a1", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "b82073564373e68c6ae3a96039fae14cd002a496", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "3308c7504e093b22e91a4468470309cee2e26b83", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "fc188b44547dea4e7350833171982a6312befde9", "versionType": "git"}, {"status": "affected", "version": "876c9d3aeb989cf1961f2c228d309ba5dcfb1172", "lessThan": "d66676e6ca96bf8680f869a9bd6573b26c634622", "versionType": "git"}], "programFiles": ["drivers/net/wireless/marvell/libertas/if_usb.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.22"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.22", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/wireless/marvell/libertas/if_usb.c"], "defaultStatus": "affected"}]}], "published": "2026-05-06T12:16:46.263", "references": [{"url": "https://git.kernel.org/stable/c/2902a9b4415a6bafc9b1e5dd360f065d757a0bb7", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3308c7504e093b22e91a4468470309cee2e26b83", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/498525d8358d6d20918787e59736d5b6a021e9fd", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5bfb25495e391a1be0db94b15715174fa06b93a1", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/948a39c95d0f8d73722910f8cdb7b6e3e9206232", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b82073564373e68c6ae3a96039fae14cd002a496", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fc188b44547dea4e7350833171982a6312befde9", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: libertas: fix WARNING in usb_tx_block\n\nThe function usb_tx_block() submits cardp->tx_urb without ensuring that\nany previous transmission on this URB has completed. If a second call\noccurs while the URB is still active (e.g. during rapid firmware loading),\nusb_submit_urb() detects the active state and triggers a warning:\n'URB submitted while active'.\n\nFix this by enforcing serialization: call usb_kill_urb() before\nsubmitting the new request. This ensures the URB is idle and safe to reuse."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nwifi: libertas: corregir ADVERTENCIA en usb_tx_block\n\nLa funci\u00f3n usb_tx_block() env\u00eda cardp -> tx_urb sin asegurar que cualquier transmisi\u00f3n anterior en este URB haya completado. Si ocurre una segunda llamada mientras el URB a\u00fan est\u00e1 activo (p. ej., durante la carga r\u00e1pida de firmware), usb_submit_urb() detecta el estado activo y activa una advertencia: \u2019URB enviado mientras est\u00e1 activo\u2019.\n\nSolucione esto aplicando la serializaci\u00f3n: llamar a usb_kill_urb() antes de enviar la nueva solicitud. Esto asegura que el URB est\u00e9 inactivo y sea seguro de reutilizar."}], "lastModified": "2026-11-11T20:10:00.273", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "045B0D8F-6A7D-440E-845B-FD59F69D247A", "versionEndExcluding": "5.10.252", "versionStartIncluding": "2.6.22"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654", "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}