01 Record

CVE-2026-43432

usb: xhci: Fix memory leak in xhci_disable_slot()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

usb: xhci: Fix memory leak in xhci_disable_slot()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-08 14:22Z3 MO AGO

Last updated

2026-05-23 16:06Z3 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-763Release of Invalid Pointer or ReferenceBase

Data version

5.2

Document digest

a4f74a357c4446756162f379ccd5d5f5a68049ae666e65c3a1a76d06a643c4d0

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxfee8be5bde562d4f5f9a100ca80c6d7072ed34c8 to < 1e800e26d54ccf2ddf2ea6d6cbe021c804d8aa62, 02d5a2a48bb44e7404b794df87e57588b2fd604e to < 6288baf0c8c4dcfbf206773aede9c1f2269cec28, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < 46aea90763832cd6e9b0c2e1c00e6a9512156d4b, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < 2e2baa8fb5aa4d080cbfeb84c51eff797529f413, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < 807e4fb5140c73eb5dba1e399a990db5c1f3cdf8, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < c65f1b840ab8ce72ba68f1b63bab7960f8fdfa89, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < 078b446efc0f5e496c31bccb72b98af979963a83, 7faac1953ed1f658f719cdf7bb7303fa5eef822c to < c1c8550e70401159184130a1afc6261db01fc0ce, cc7c2818c71ebace207df40cc586c8c74e3d1a59, ec0cddcc2454ab08193beb473978f8f8889b7e24, 5.10.85 to < 5.10.253, 5.15.8 to < 5.15.203, 4.19.221 to < 4.20, 5.4.165 to < 5.5, 5.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/1e800e26d54ccf2ddf2ea6d6cbe021c804d8aa62
git.kernel.orghttps://git.kernel.org/stable/c/6288baf0c8c4dcfbf206773aede9c1f2269cec28
git.kernel.orghttps://git.kernel.org/stable/c/46aea90763832cd6e9b0c2e1c00e6a9512156d4b
git.kernel.orghttps://git.kernel.org/stable/c/2e2baa8fb5aa4d080cbfeb84c51eff797529f413
git.kernel.orghttps://git.kernel.org/stable/c/807e4fb5140c73eb5dba1e399a990db5c1f3cdf8
git.kernel.orghttps://git.kernel.org/stable/c/c65f1b840ab8ce72ba68f1b63bab7960f8fdfa89
git.kernel.orghttps://git.kernel.org/stable/c/078b446efc0f5e496c31bccb72b98af979963a83
git.kernel.orghttps://git.kernel.org/stable/c/c1c8550e70401159184130a1afc6261db01fc0ce

01 Record index

CVE-2026-43432

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43432

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References