In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/170e8daca24da6edb4be82ab01abf44e87af387b cve-icon cve-icon
https://git.kernel.org/stable/c/276aef0fd2b92f41b920ac891c72cadeee957934 cve-icon cve-icon
https://git.kernel.org/stable/c/4ee3062bf2c9a722afef429826e8607eaf3fc6a0 cve-icon cve-icon
https://git.kernel.org/stable/c/638328ca9c17ae6511ad62198c57bae32ffa3c91 cve-icon cve-icon
https://git.kernel.org/stable/c/67ed312124bb1b61858778ac0b985b48961c862a cve-icon cve-icon
https://git.kernel.org/stable/c/8df672bfe3ec2268c2636584202755898e547173 cve-icon cve-icon
https://git.kernel.org/stable/c/c8fa96ed021923dae147bcd9f9205b8df7b82360 cve-icon cve-icon
https://git.kernel.org/stable/c/e3c874b05901dc519054b5107d16620e6d2b5fea cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026050849-CVE-2026-43427-12cc@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-43427 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-43427 cve-icon
History

Sat, 09 May 2026 14:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-254

Sat, 09 May 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-366
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Fri, 08 May 2026 18:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-254

Fri, 08 May 2026 14:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.
Title usb: class: cdc-wdm: fix reordering issue in read code path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-08T14:22:00.345Z

Reserved: 2026-05-01T14:12:56.009Z

Link: CVE-2026-43427

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-05-08T15:16:54.867

Modified: 2026-05-08T15:16:54.867

Link: CVE-2026-43427

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-05-08T00:00:00Z

Links: CVE-2026-43427 - Bugzilla