CVE-2026-43255 Details
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The function usb_tx_block() submits cardp->tx_urb without ensuring that any previous transmission on this URB has completed. If a second call occurs while the URB is still active (e.g. during rapid firmware loading), usb_submit_urb() detects the active state and triggers a warning: 'URB submitted while active'. Fix this by enforcing serialization: call usb_kill_urb() before submitting the new request. This ensures the URB is idle and safe to reuse.
A vulnerability in the Linux kernel's WiFi Libertas driver has been addressed. The issue arose in the 'usb_tx_block()' function, which submitted a USB transfer request without confirming that any prior transmission had finished. This could lead to a warning being triggered if a new request was sent while the previous one was still active, such as during fast firmware updates. The vulnerability has been fixed by ensuring that the USB transfer request is completed before a new one is submitted, preventing the warning from occurring.
Users can update to the latest version of the Linux kernel, where this vulnerability has been fixed. Instructions for downloading the updated kernel can be found on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2902a9b4415a6bafc9b1e5dd360f065d757a0bb7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3308c7504e093b22e91a4468470309cee2e26b83 | kernel.org | Patch |
| https://git.kernel.org/stable/c/498525d8358d6d20918787e59736d5b6a021e9fd | kernel.org | Patch |
| https://git.kernel.org/stable/c/5bfb25495e391a1be0db94b15715174fa06b93a1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/948a39c95d0f8d73722910f8cdb7b6e3e9206232 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b82073564373e68c6ae3a96039fae14cd002a496 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d66676e6ca96bf8680f869a9bd6573b26c634622 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fc188b44547dea4e7350833171982a6312befde9 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.22, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 11, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |