CVE-2026-43170

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists where the dwc3 gadget vbus draw() function can be called from an atomic context. This function invokes power-supply-core APIs, some of which contain PMIC (Power Management Integrated Circuit) operations that may sleep. Calling functions that sleep from an atomic context can lead to a kernel panic.

Recommendations Move the vbus draw operation into a workqueue context.