CVE-2026-43007

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the accel/qaic component where the host may become out-of-sync with available Doorbell Control (DBC) resources if a user disconnects before a QAIC TRANS DEACTIVATE FROM DEV transaction is processed. This occurs because the decode deactivate() function, which releases DBC resources, is executed within the qaic manage ioctl() context. If the user is no longer present, resources are not freed unless the device is removed. Consequently, if a subsequent user requests to activate a network and is assigned the same DBC, the system will wait indefinitely for the dbc->in use variable to become false, causing the user process to hang.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.