CVE-2026-43427: linux Out-of-bounds Read
Vulnerability summary
CVE-2026-43427 is a high (CVSS 7.1) Out-of-bounds Read vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 40 · Related 40Timeline
- 08-05-2026PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.1HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
+0.04 pp
From 0.13% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu157 products
- linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-136.136
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1061.64
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 638328ca9c17ae6511ad62198c57bae32ffa3c91 | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 170e8daca24da6edb4be82ab01abf44e87af387b | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < c8fa96ed021923dae147bcd9f9205b8df7b82360 | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 4ee3062bf2c9a722afef429826e8607eaf3fc6a0 | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 276aef0fd2b92f41b920ac891c72cadeee957934 | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 67ed312124bb1b61858778ac0b985b48961c862a | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < e3c874b05901dc519054b5107d16620e6d2b5fea | ≥ afba937e540c902c989cd516fd97ea0c8499bb27, < 8df672bfe3ec2268c2636584202755898e547173 | 2.6.26
- linux_kernel≥ 2.6.26.1, < 5.10.253 | ≥ 5.11, < 5.15.203 | ≥ 5.16, < 6.1.167 | ≥ 6.2, < 6.6.130 | ≥ 6.7, < 6.12.78 | ≥ 6.13, < 6.18.19 | ≥ 6.19, < 6.19.9 | 2.6.26 | 2.6.26:rc4 | 2.6.26:rc5 | 2.6.26:rc6 | 2.6.26:rc7 | 2.6.26:rc8 | 2.6.26:rc9 | 7.0:rc1 | 7.0:rc2 | 7.0:rc3 | 7.0:rc4 | 7.0:rc5 | 7.0:rc6 | 7.0:rc7
Debian1 product
- linux< 6.1.170-1 | < 6.12.85-1 | < 6.19.10-1
3 vendors · 160 products
