CVE-2026-97430
Description
A flaw was found in the Linux kernel's USB eXtensible Host Controller Interface (xHCI) driver. When the host controller is inaccessible during power management operations, such as system suspend or resume, new commands are not properly prevented from being added to the command ring. A local user could trigger this condition to cause improper device state handling, potentially resulting in a Denial of Service (DoS) or system instability.
Statement
A low impact flaw was found in the Linux kernel USB eXtensible Host Controller Interface (xHCI) driver. When the host controller is marked inaccessible via HCD_FLAG_HW_ACCESSIBLE during power management operations, such as system suspend or resume, the driver does not prevent new commands from being queued on the command ring. A local user could trigger this condition to cause improper device state handling, potentially resulting in a denial of service or system instability. This issue affects the kernel in supported Red Hat Enterprise Linux streams (including ELS), Red Hat In-Vehicle Operating System, and OpenShift streams, where the fix has been deferred due to the low severity of the issue; the residual risk is limited to availability, as successful exploitation requires local access and precise timing during suspend/resume transitions. Red Hat Enterprise Linux 6 Extended Lifecycle Support is out of support scope for this issue. Although the Red Hat CVSS 3.1 base score is 5.5 (Moderate), the overall impact is rated Low because the flaw only affects availability, requires local privileges, and depends on a narrow timing window during power management transitions.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
