Answer in brief
CVE-2026-43429 records a Unknown severity vulnerability in USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=048c6d88a0214757926f264823829e79154fcd4f <e14a0dcdf468c3ad616bb06696c7c64c36e736d8 || >=048c6d88a0214757926f264823829e79154fcd4f <7fa72c369c23c27d1f64883c1e276af950557fb1 || >=048c6d88a0214757926f264823829e79154fcd4f <72c0a063489be183cfb99e7050aaef503bdb6449 || >=048c6d88a0214757926f264823829e79154fcd4f <39bd4097292fd8564cf2cfba9356f8ab11e38d12 || >=048c6d88a0214757926f264823829e79154fcd4f <0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d || >=048c6d88a0214757926f264823829e79154fcd4f <6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a || >=048c6d88a0214757926f264823829e79154fcd4f <d4f1c45bdff3f393f9ab7e76795901c442b9eb76 || >=048c6d88a0214757926f264823829e79154fcd4f <7784caa413a89487dd14dd5c41db8753483b2acb | e14a0dcdf468c3ad616bb06696c7c64c36e736d8, 7fa72c369c23c27d1f64883c1e276af950557fb1, 72c0a063489be183cfb99e7050aaef503bdb6449, 39bd4097292fd8564cf2cfba9356f8ab11e38d12, 0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d, 6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a, d4f1c45bdff3f393f9ab7e76795901c442b9eb76, 7784caa413a89487dd14dd5c41db8753483b2acb |
| Linux/Linuxgeneric | 4.19 | Not reported |
Published upstream
May 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts The usbtmc driver accepts timeout values specified by the user in an ioctl command, and uses these timeouts for some usb_bulk_msg() calls. Since the user can specify arbitrarily long timeouts and usb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable() instead to avoid the possibility of the user hanging a kernel thread indefinitely.
Quoted source text, attributed separately from HOL analysis.