CVE-2026-43353

Last refreshed2026-10-23

Status: UPDATED | Advisory ID: CVE-2026-43353

Key Details

CVE	CVE-2026-43353
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-21
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Classified as	CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

i3c: mipi-i3c-hci: Fix race in DMA ring dequeue

The HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invoked for

multiple transfers that timeout around the same time. However, the

function is not serialized and can race with itself.

When a timeout occurs, hci_dma_dequeue_xfer() stops the ring, processes

incomplete transfers, and then restarts the ring. If another timeout

triggers a parallel call into the same function, the two instances may

interfere with each other - stopping or restarting the ring at unexpected

times.

Add a mutex so that hci_dma_dequeue_xfer() is serialized with respect to

itself. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-43353
CVE	https://www.cve.org/CVERecord?id=CVE-2026-43353

Source

Reference

NVD

CVE