CVE-2026-43170

usb: dwc3: gadget: Move vbus draw to workqueue context

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc3: gadget: Move vbus draw to workqueue context

Currently dwc3_gadget_vbus_draw() can be called from atomic

context, which in turn invokes power-supply-core APIs. And

some these PMIC APIs have operations that may sleep, leading

to kernel panic.

Fix this by moving the vbus_draw into a workqueue context.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-06T11:27Z
EPSS history
Timeline
  • 06 MAY 11:27Z
    usb: dwc3: gadget: Move vbus draw to workqueue context
    cvelistv5