All vulnerabilities
CVE-2026-97430

Linux: xhci: Prevent queuing new commands if xhci is inaccessible

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0e2eaa000e4e5ad46b7cf8fcf1e4a2585ef8b5a8Also 82b70c799281cc24506085be978b829149ba0ca4CVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 0e2eaa000e4e5ad46b7cf8fcf1e4a2585ef8b5a8LinuxCVE List
  • 82b70c799281cc24506085be978b829149ba0ca4LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

xhci: Prevent queuing new commands if xhci is inaccessible

Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCD_FLAG_HW_ACCESSIBLE.

HCD_FLAG_HW_ACCESSIBLE is set and cleared in suspend and resume.

Also print a warning if xhci is being suspended with commands still pending on the command ring.

Text from CVE List

Affected versions 16

  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before 0e2eaa000e4e5ad46b7cf8fcf1e4a2585ef8b5a8CVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before add3aeb74e2c7d82fa1035af2a027666c6906210CVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before a215190ef68ca3602fe00674e0efffad71beb3aaCVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before fec259e46d44317379834a44115fae66122dc93fCVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before a50948386256b24d73971b9a152fe1de808446abCVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before a05e54c1eeaba10414aa2fde94589a7c9885f2a1CVE List
  • Linuxaffected: 5535b1d5f8885695c6ded783c692e3c0d0eda8ca before 82b70c799281cc24506085be978b829149ba0ca4CVE List
  • Linuxaffected: 2.6.37CVE List
  • Linuxunaffected: all versions before 2.6.37CVE List
  • Linuxunaffected: 5.10.271 through 5.10.*CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 7