CVE-2026-43488— usb: xhci: Prevent interrupt storm on host controller error (HCE)
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-43488
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
usb: xhci: Prevent interrupt storm on host controller error (HCE)
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error (HCE) The xHCI controller reports a Host Controller Error (HCE) in UAS Storage Device plug/unplug scenarios on Android devices. HCE is checked in xhci_irq() function and causes an interrupt storm (since the interrupt isn’t cleared), leading to severe system-level faults. When the xHC controller reports HCE in the interrupt handler, the driver only logs a warning and assumes xHC activity will stop as stated in xHCI specification. An interrupt storm does however continue on some hosts even after HCE, and only ceases after manually disabling xHC interrupt and stopping the controller by calling xhci_halt(). Add xhci_halt() to xhci_irq() function where STS_HCE status is checked, mirroring the existing error handling pattern used for STS_FATAL errors. This only fixes the interrupt storm. Proper HCE recovery requires resetting and re-initializing the xHC.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于xHCI控制器报告主机控制器错误时未清除中断，可能导致中断风暴。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-43488
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-43488
请登录查看更多情报信息。
Same Patch Batch · Linux · 2026-05-13 · 14 CVEs total
| CVE-2026-43489 | liveupdate: luo_file: remember retrieve() status | |
| CVE-2026-43487 | ata: libata-core: Disable LPM on ST1000DM010-2EP102 | |
| CVE-2026-43485 | nouveau/gsp: drop WARN_ON in ACPI probes | |
| CVE-2026-43486 | arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults | |
| CVE-2026-43484 | mmc: core: Avoid bitfield RMW for claim/retune flags | |
| CVE-2026-43482 | sched_ext: Disable preemption between scx_claim_exit() and kicking helper work | |
| CVE-2026-43483 | KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated | |
| CVE-2026-43480 | ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition | |
| CVE-2026-43481 | net-shapers: don't free reply skb after genlmsg_reply() | |
| CVE-2026-43479 | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | |
| CVE-2026-43477 | drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL | |
| CVE-2026-43478 | ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put | |
| CVE-2026-43476 | iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() |
IV. Related Vulnerabilities
V. Comments for CVE-2026-43488
No comments yet