Answer in brief
CVE-2026-43156 records a Unknown severity vulnerability in net: usb: pegasus: enable basic endpoint checking. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <a3e64e950a3981a8199de9798f6d21261b959171 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <229dc9b9db475ac900182bafe258943e0e054c6d || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <26b3ec62fa1a94ac801feca47f040fc729b3c174 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <35854ed5c40b02f95824e44398f9d2ba33727203 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <67ba6b13dbcaf45681fb6758794c5ac5fa589a6c || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <d2e7c898cc02dfe42443489a67a45ed616cb76e9 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <2705709f6574a088aab246af72fc95f2fea51484 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <3d7e6ce34f4fcc7083510c28b17a7c36462a25d4 | a3e64e950a3981a8199de9798f6d21261b959171, 229dc9b9db475ac900182bafe258943e0e054c6d, 26b3ec62fa1a94ac801feca47f040fc729b3c174, 35854ed5c40b02f95824e44398f9d2ba33727203, 67ba6b13dbcaf45681fb6758794c5ac5fa589a6c, d2e7c898cc02dfe42443489a67a45ed616cb76e9, 2705709f6574a088aab246af72fc95f2fea51484, 3d7e6ce34f4fcc7083510c28b17a7c36462a25d4 |
| Linux/Linuxgeneric | 2.6.12 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fills URBs with hardcoded endpoint pipes without verifying the endpoint descriptors: - usb_rcvbulkpipe(dev, 1) for RX data - usb_sndbulkpipe(dev, 2) for TX data - usb_rcvintpipe(dev, 3) for status interrupts A malformed USB device can present these endpoints with transfer types that differ from what the driver assumes. Add a pegasus_usb_ep enum for endpoint numbers, replacing magic constants throughout. Add usb_check_bulk_endpoints() and usb_check_int_endpoints() calls before any resource allocation to verify endpoint types before use, rejecting devices with mismatched descriptors at probe time, and avoid triggering assertion. Similar fix to - commit 90b7f2961798 ("net: usb: rtl8150: enable basic endpoint checking") - commit 9e7021d2aeae ("net: usb: catc: enable basic endpoint checking")
Quoted source text, attributed separately from HOL analysis.