{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"e14a0dcdf468c3ad616bb06696c7c64c36e736d8","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"7fa72c369c23c27d1f64883c1e276af950557fb1","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"72c0a063489be183cfb99e7050aaef503bdb6449","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"39bd4097292fd8564cf2cfba9356f8ab11e38d12","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"d4f1c45bdff3f393f9ab7e76795901c442b9eb76","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"},{"lessThan":"7784caa413a89487dd14dd5c41db8753483b2acb","status":"affected","version":"048c6d88a0214757926f264823829e79154fcd4f","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"4.19"},{"lessThan":"4.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.78","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-43429","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts\n\nThe usbtmc driver accepts timeout values specified by the user in an\nioctl command, and uses these timeouts for some usb_bulk_msg() calls.\nSince the user can specify arbitrarily long timeouts and\nusb_bulk_msg() uses unkillable waits, call usb_bulk_msg_killable()\ninstead to avoid the possibility of the user hanging a kernel thread\nindefinitely.","epss":{"date":"2026-11-06","percentile":0.02042,"score":0.00123},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979773553,"publishedAt":1778250121739,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e14a0dcdf468c3ad616bb06696c7c64c36e736d8"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7fa72c369c23c27d1f64883c1e276af950557fb1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/72c0a063489be183cfb99e7050aaef503bdb6449"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/39bd4097292fd8564cf2cfba9356f8ab11e38d12"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0535f84cb94c9d8bcba0a2a5b3fac81b7d97235d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6cb7dc91f057dd8ce44f6caa2995d8e22784ed0a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d4f1c45bdff3f393f9ab7e76795901c442b9eb76"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7784caa413a89487dd14dd5c41db8753483b2acb"}],"remediation":[],"revision":"0bce4808a7ba09f4327388c7c4bb7201914ecef819ad66da4083c76ff79ecaf0","sources":[{"modifiedAt":1793979773553,"name":"CNA: Linux","retrievedAt":1793981705242,"url":"https://www.cve.org/CVERecord?id=CVE-2026-43429"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981731792,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43429"}],"ssvc":{"assessedAt":1793979499264,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts","updatedAt":1793981731792}