CVE-2026-43170 Linux CVE debrief

Who should care

Linux kernel developers, maintainers, and users who need to assess exposure and apply patches to prevent potential kernel panics. The vulnerability affects systems using the Linux kernel, particularly those with versions within the vulnerable ranges. Operators, platform administrators, and security teams should review the vulnerability details and take necessary actions to mitigate potential risks. This includes verifying Linux kernel versions, applying, 6

Why it matters

CVE-2026-43170 is a medium-severity vulnerability in the Linux kernel that requires verification of exposure, patch application, and monitoring to prevent system instability.

• Verification of Linux kernel versions and exposure assessment is required to prevent potential system instability.
• Patch application is necessary to prevent kernel panics in systems using the affected Linux kernel versions.
• Monitoring system logs for kernel panic events related to dwc3_gadget_vbus_draw() can help detect potential issues.

Technical summary

The Linux kernel vulnerability CVE-2026-43170 is caused by dwc3_gadget_vbus_draw() being called from atomic context, leading to potential kernel panics due to sleeping operations in power-supply-core APIs. The fix moves vbus_draw into a workqueue context, preventing kernel panics by ensuring that operations that may sleep are executed in a suitable context. This change is crucial for systems using the affected Linux kernel versions, as it helps maintain system stability and prevent potential crashes. Linux kernel developers, maintainers, and users should prioritize assessing exposure and applying patches.

Defensive priority

Medium priority should be given to assessing exposure and applying patches, as the vulnerability has a CVSS score of 5.5 and is related to a critical system component.

Recommended defensive actions

• Assess exposure by checking if the Linux kernel versions in use fall within the vulnerable ranges (5.13 to 6.6.128, 6.7 to 6.12.75, 6.13 to 6.18.16, 6.19 to 6.19.6).
• Apply patches from the Linux kernel stable repository as referenced in the source references.
• Monitor system logs for potential kernel panic events related to dwc3_gadget_vbus_draw().
• Verify the effectiveness of the patches in preventing kernel panics in a controlled environment.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, its impact, and the fix. However, the corpus does not establish specific versions affected or exploitation instances. The vulnerability is in the Linux kernel, specifically in the dwc3 gadget driver. The fix moves the vbus_draw operation into a workqueue context to prevent kernel panics caused by sleeping operations in power-supply-core APIs. Defenders should verify Linux kernel versions in use, assess exposure, and apply patches from the Linux kernel stable as a

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.