CVE-2026-43170
MediumSummary
A vulnerability has been identified in the Linux kernel related to the dwc3_gadget_vbus_draw() function, which can be called from atomic context. This leads to invoking power-supply APIs that may cause synchronization issues as some operations may require sleeping.
Risk Assessment
This vulnerability may lead to system instability, affecting the availability of services within the organization. If synchronization issues occur, it could result in failures of power-dependent components.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched. Additionally, monitor systems for potential power-related issues.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue context Currently dwc3_gadget_vbus_draw() can be called from atomic context, which in turn invokes power-supply-core APIs. And some these PMIC APIs have operations that may sleep, lea