PT-2026-38935 · Linux · Linux Kernel

CVE-2026-43293

·

Published

2025-12-04

·

Updated

2026-08-12

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A race condition exists in the wave5 driver when operating in polling mode. The driver uses an hrtimer to periodically trigger the wave5 vpu timer callback() function, which queues work via kthread queue work(). Because the original code executed kthread destroy worker() before hrtimer cancel(), the timer could fire during the worker destruction process and queue new work. This leads to kernel warnings during module removal when kthread destroy worker() detects that the work queues are not empty.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Time Of Check To Time Of Use

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12184
CVE-2026-43293
OPENSUSE-SU-2026:21555-1
SUSE-SU-2026:23066-1
SUSE-SU-2026:23068-1
SUSE-SU-2026:23221-1
SUSE-SU-2026:23231-1
SUSE-SU-2026:23237-1

Affected Products

Linux Kernel