CVE-2026-43007

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends a QAIC_TRANS_DEACTIVATE_FROM_DEV transaction to the host over the QAIC_CONTROL MHI channel. QAIC handles this by calling decode_deactivate() to release the resources allocated for that DBC. Since that handling is done in the qaic_manage_ioctl() context, if the user goes away before receiving and handling the deactivation, the host will be out-of-sync with the DBCs available for use, and the DBC resources will not be freed unless the device is removed. If another user loads and requests to activate a network, then the device assigns the same DBC to that network, QAIC will "indefinitely" wait for dbc->in_use = false, leading the user process to hang. As a solution to this, handle QAIC_TRANS_DEACTIVATE_FROM_DEV transactions that are received after the user has gone away.

• CWE-415

• https://git.kernel.org/stable/c/08021f2d4a557d6491e3bcc288e96425f50aa3cfPatch
• https://git.kernel.org/stable/c/2dd67966f39a2abf8ccb4865031c722e40e01b7fPatch
• https://git.kernel.org/stable/c/2feec5ae5df785658924ab6bd91280dc3926507cPatch
• https://git.kernel.org/stable/c/ee0180e77e6c8482644569632065411de844c515Patch
• https://git.kernel.org/stable/c/f403094d9075d7c565a3d81002b781c325cb3c07Patch

Published

May 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43001An issue was discovered in OpenStack Keystone before 29.0.2.…8
• CVE-2026-43002An issue was discovered in OpenStack Horizon 25.6 and 25.7 b…5.3
• CVE-2026-43003An issue was discovered in OpenStack ironic-python-agent 1.0…7.5
• CVE-2026-43004In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43005In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-43006In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-43008In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43009In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-4301The Rate Star Review Vote - AJAX Reviews, Votes, Star Rating…4.3
• CVE-2026-43010In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43011In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-43012In the Linux kernel, the following vulnerability has been re…5.5