In the Linux kernel, the following vulnerability has been resolved: i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue The logic used to abort the DMA ring contains several flaws: 1. The driver unconditionally issues a ring abort even when the ring has already stopped. 2. The completion used to wait for abort completion is never re-initialized, resulting in incorrect wait behavior. 3. The abort sequence unintentionally clears RING_CTRL_ENABLE, which resets hardware ring pointers and disrupts the controller state. 4. If the ring is already stopped, the abort operation should be considered successful without attempting further action. Fix the abort handling by checking whether the ring is running before issuing an abort, re-initializing the completion when needed, ensuring that RING_CTRL_ENABLE remains asserted during abort, and treating an already stopped ring as a successful condition.

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue The logic used to abort the DMA ring     contains several flaws: 1. The driver unconditionally issues a ring abort even when the ring has already     stopped. 2. The completion used to wait for abort completion is never re-initialized, resulting in     incorrect wait behavior. 3. The abort sequence unintentionally clears RING_CTRL_ENABLE, which resets     hardware ring pointers and disrupts the controller state. 4. If the ring is already stopped, the abort     operation should be considered successful without attempting further action. Fix the abort handling by     checking whether the ring is running before issuing an abort, re-initializing the completion when needed,     ensuring that RING_CTRL_ENABLE remains asserted during abort, and treating an already stopped ring as a     successful condition. (CVE-2026-43352)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
341024	SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3790-1)	Nessus	SuSE Local Security Checks	Local	high
335080	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21555-1)	Nessus	SuSE Local Security Checks	Local	high
334085	Photon OS 5.0: Linux PHSA-2026-5.0-91-0862	Nessus	PhotonOS Local Security Checks	Local	high
319599	Photon OS 5.0: Linux PHSA-2026-5.0-0862	Nessus	PhotonOS Local Security Checks	Local	high
313303	Linux Distros Unpatched Vulnerability : CVE-2026-43352	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-43352

high

Tenable Plugins

high

high

high

high

high