CVE-2026-97430

high

Description

In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCD_FLAG_HW_ACCESSIBLE. HCD_FLAG_HW_ACCESSIBLE is set and cleared in suspend and resume. Also print a warning if xhci is being suspended with commands still pending on the command ring.

References

https://git.kernel.org/stable/c/a50948386256b24d73971b9a152fe1de808446ab

https://git.kernel.org/stable/c/a05e54c1eeaba10414aa2fde94589a7c9885f2a1

https://git.kernel.org/stable/c/82b70c799281cc24506085be978b829149ba0ca4

Details

Source: Mitre, NVD

Published: 2026-09-24

Updated: 2026-09-25

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00166