Junglewise Threat Intelligence

CVE-2026-43427: Linux Kernel information disclosure in USB CDC-WDM driver

CVE-2026-43427 · Severity: high · CVSS 7.1 · Published 2026-05-08

Technologies: Linux Kernel. Vendors: Linux.

Executive brief

A vulnerability in the Linux kernel's USB driver for Communication Device Class (CDC) Wireless Data Model (WDM) devices could allow an attacker to access sensitive information. Due to a technical error in how the system handles memory updates, the kernel might accidentally share uninitialized memory with a user. This could lead to the exposure of private data or cause system instability.

Technical details

A race condition exists in the drivers/usb/class/cdc-wdm.c component of the Linux kernel. Due to compiler optimization or CPU out-of-order execution, the update to 'desc->length' in the 'wdm_in_callback' function can be reordered before the 'memmove' operation that populates the buffer. Consequently, the 'wdm_read' function may perceive the updated length and execute 'copy_to_user' on uninitialized memory. This violates the Linux Kernel Memory Model (LKMM) data race rules. The issue has been resolved by implementing 'WRITE_ONCE' and appropriate memory barriers ('smp_wmb' and 'smp_rmb') to ensure proper execution ordering.

Affected products

  • Linux Linux Kernel All versions prior to the 2026-03/04 patches

Timeline

  • 2026-03-04: patched: Initial patch authored by Oliver Neukum
  • 2026-05-08: disclosed: CVE published to NVD

References

Related threats