Skip to main content

Linux Kernel EUVDEUVD-2026-27821

| CVE-2026-43259 MEDIUM
2026-05-06 Linux GHSA-wqxw-h6xc-72x8
Information Disclosure Linux
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.5 MEDIUM

Local access needed to trigger driver removal; no confidentiality or integrity impact; kernel panic yields high availability impact on the vulnerable embedded system.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.5 LOW
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 24, 2026 - 00:53 vuln.today
CVSS changed
May 08, 2026 - 20:37 NVD
5.5 (MEDIUM)
Patch available
May 06, 2026 - 13:32 EUVD
CVE Published
May 06, 2026 - 11:28 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

phy: fsl-imx8mq-usb: set platform driver data

Add missing platform_set_drvdata() as the data will be used in remove().

AnalysisAI

NULL pointer dereference in the Linux kernel's fsl-imx8mq-usb PHY driver crashes systems built on NXP i.MX8MQ SoC when the driver is unloaded or the device is removed. The driver's probe function omits the required platform_set_drvdata() call, leaving the driver data pointer unset; when remove() subsequently dereferences it, a kernel panic results. Exploitation is limited to local, low-privilege users on specialized embedded hardware; EPSS at 0.02% (4th percentile) and absence from CISA KEV confirm no public exploit or in-the-wild exploitation at time of analysis.

Technical ContextAI

The affected component is the phy-fsl-imx8mq-usb driver, which manages the USB Physical Layer interface on NXP's i.MX8MQ system-on-chip - a platform used in embedded Linux, IoT, and industrial hardware. The Linux kernel driver model requires platform_set_drvdata() to be called during a driver's probe() function to bind a private data structure to the platform device. Omitting this call means subsequent invocations of platform_get_drvdata() inside remove() return NULL. Dereferencing that NULL pointer causes a kernel oops or BUG, crashing the system. No CWE is formally assigned; the root cause maps to CWE-476 (NULL Pointer Dereference). CPE data confirms the affected product as cpe:2.3:a:linux:linux across versions from commit b58f0f86fd6156d7b084257f5c91ceaf7d760927 onward until the respective stable-branch fixes.

RemediationAI

Upgrade to a patched Linux kernel version: 6.18.16 or later in the 6.18.x stable series, 6.19.6 or later in the 6.19.x series, or 7.0 and later. The upstream fix is available via three stable-tree commits at https://git.kernel.org/stable/c/42d9509161d0539767ba875f3ef6b4b3c0b425ed, https://git.kernel.org/stable/c/06db8c06d94858cda4b3870f421a1aeeef617690, and https://git.kernel.org/stable/c/debf8326a435ac746f48173e4742a574810f1ff4. As a compensating control where immediate upgrade is not feasible, restrict unprivileged users from unloading kernel modules by enforcing CAP_SYS_MODULE via seccomp filters or MAC policies (AppArmor/SELinux); note that this may interfere with legitimate module management workflows. Systems not based on NXP i.MX8MQ SoC hardware are unaffected and require no action.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

EUVD-2026-27821 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy