HOMEVULNERABILITIESCVE-2026-43429
NONE

CVE-2026-43429

Published: May 8, 2026· Updated: May 12, 2026

EPSS:0.02%probability of exploitation in 30 daysPercentile:7.0th

Official Description

In the Linux kernel, the following vulnerability has been resolved:

USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts

The usbtmc driver accepts timeout values specified by the user in an

ioctl command, and uses these timeouts for some usb_bulk_msg() calls.

Since the user can specify arbitrarily long timeouts and

usb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable()

instead to avoid the possibility of the user hanging a kernel thread

indefinitely.

NVD Source

Technical Analysis

CVE-2026-43429 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

Affected Vendors & Products

Mentioned vendors (from description):
Linux
CPE data not yet available in NVD for this CVE.

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

All References (8)

→
https://git.kernel.org/stable/c/0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d
→
https://git.kernel.org/stable/c/39bd4097292fd8564cf2cfba9356f8ab11e38d12
→
https://git.kernel.org/stable/c/6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a
→
https://git.kernel.org/stable/c/72c0a063489be183cfb99e7050aaef503bdb6449
→
https://git.kernel.org/stable/c/7784caa413a89487dd14dd5c41db8753483b2acb
→
https://git.kernel.org/stable/c/7fa72c369c23c27d1f64883c1e276af950557fb1
→
https://git.kernel.org/stable/c/d4f1c45bdff3f393f9ab7e76795901c442b9eb76
→
https://git.kernel.org/stable/c/e14a0dcdf468c3ad616bb06696c7c64c36e736d8

Quick Facts

CVE IDCVE-2026-43429
SeverityNONE
CISA KEVNo
EPSS (30d)0.02%
PublishedMay 8, 2026

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2026-43429 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2026-43429·NVD