CVE-2026-43156: linux
Vulnerability summary
CVE-2026-43156 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.16% chance of exploitation in the next 30 days, higher than 5% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 38 · Related 38Timeline
- 06-05-2026PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fills URBs with hardcoded endpoint pipes without verifying the endpoint descriptors: - usb_rcvbulkpipe(dev, 1) for RX data - usb_sndbulkpipe(dev, 2) for TX data - usb_rcvintpipe(dev, 3) for status interrupts A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes. Add a pegasus_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls before any resource allocation to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time, and avoid triggering assertion. Similar fix to - commit 90b7f2961798 ("net: usb: rtl8150: enable basic endpoint checking") - commit 9e7021d2aeae ("net: usb: catc: enable basic endpoint checking")
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.16%
Chance of exploitation in the next 30 days
Percentile
5%
Versus all other CVEs
30-day change
+0.04 pp
From 0.12% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-134.134
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1060.63
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a3e64e950a3981a8199de9798f6d21261b959171 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 229dc9b9db475ac900182bafe258943e0e054c6d | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 26b3ec62fa1a94ac801feca47f040fc729b3c174 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 35854ed5c40b02f95824e44398f9d2ba33727203 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 67ba6b13dbcaf45681fb6758794c5ac5fa589a6c | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < d2e7c898cc02dfe42443489a67a45ed616cb76e9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2705709f6574a088aab246af72fc95f2fea51484 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 3d7e6ce34f4fcc7083510c28b17a7c36462a25d4 | 2.6.12
- linux_kernel≥ 2.6.12.1, < 5.10.252 | ≥ 5.11, < 5.15.202 | ≥ 5.16, < 6.1.165 | ≥ 6.2, < 6.6.128 | ≥ 6.7, < 6.12.75 | ≥ 6.13, < 6.18.16 | ≥ 6.19, < 6.19.6 | 2.6.12 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5 | 7.0:rc1
Debian1 product
- linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.6-1
3 vendors · 160 products
