High 7.1Published May 8, 2026

CVE-2026-43427usb: class: cdc-wdm: fix reordering issue in read code path

Updated under an hour ago (Oct 27, 2026, 9:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

CVSS: 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from afba937e540c902c989cd516fd97ea0c8499bb27 before 638328ca9c17ae6511ad62198c57bae32ffa3c91; from afba937e540c902c989cd516fd97ea0c8499bb27 before 170e8daca24da6edb4be82ab01abf44e87af387b; from afba937e540c902c989cd516fd97ea0c8499bb27 before c8fa96ed021923dae147bcd9f9205b8df7b82360; from afba937e540c902c989cd516fd97ea0c8499bb27 before 4ee3062bf2c9a722afef429826e8607eaf3fc6a0; from afba937e540c902c989cd516fd97ea0c8499bb27 before 276aef0fd2b92f41b920ac891c72cadeee957934; from afba937e540c902c989cd516fd97ea0c8499bb27 before 67ed312124bb1b61858778ac0b985b48961c862a; from afba937e540c902c989cd516fd97ea0c8499bb27 before e3c874b05901dc519054b5107d16620e6d2b5fea; from afba937e540c902c989cd516fd97ea0c8499bb27 before 8df672bfe3ec2268c2636584202755898e547173	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.26.1 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.167; from 6.2 before 6.6.130; from 6.7 before 6.12.78; from 6.13 before 6.18.19; from 6.19 before 6.19.9; 2.6.26; and 13 more ranges	NVD

References

References

https://git.kernel.org/stable/c/638328ca9c17ae6511ad62198c57bae32ffa3c91	patch
https://git.kernel.org/stable/c/170e8daca24da6edb4be82ab01abf44e87af387b	patch
https://git.kernel.org/stable/c/c8fa96ed021923dae147bcd9f9205b8df7b82360	patch
https://git.kernel.org/stable/c/4ee3062bf2c9a722afef429826e8607eaf3fc6a0	patch
https://git.kernel.org/stable/c/276aef0fd2b92f41b920ac891c72cadeee957934	patch
https://git.kernel.org/stable/c/67ed312124bb1b61858778ac0b985b48961c862a	patch
https://git.kernel.org/stable/c/e3c874b05901dc519054b5107d16620e6d2b5fea	patch
https://git.kernel.org/stable/c/8df672bfe3ec2268c2636584202755898e547173	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.