CVE-2026-97430

Source
https://cve.org/CVERecord?id=CVE-2026-97430
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97430.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97430
Downstream
Published
2026-09-24T16:03:43Z
Modified
2026-10-05T02:30:40Z
Summary
xhci: Prevent queuing new commands if xhci is inaccessible
Details

In the Linux kernel, the following vulnerability has been resolved:

xhci: Prevent queuing new commands if xhci is inaccessible

Refuse to queue a new command on the command ring if xHC is marked inaccessible with the HCD_FLAG_HW_ACCESSIBLE.

HCD_FLAG_HW_ACCESSIBLE is set and cleared in suspend and resume.

Also print a warning if xhci is being suspended with commands still pending on the command ring.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97430.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5535b1d5f8885695c6ded783c692e3c0d0eda8ca
Fixed
0e2eaa000e4e5ad46b7cf8fcf1e4a2585ef8b5a8
Fixed
add3aeb74e2c7d82fa1035af2a027666c6906210
Fixed
a215190ef68ca3602fe00674e0efffad71beb3aa
Fixed
fec259e46d44317379834a44115fae66122dc93f
Fixed
a50948386256b24d73971b9a152fe1de808446ab
Fixed
a05e54c1eeaba10414aa2fde94589a7c9885f2a1
Fixed
82b70c799281cc24506085be978b829149ba0ca4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97430.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.37
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97430.json"