Linux Kernel Vulnerability in UFS Driver Leading to System Crashes

CVE-2026-43275

What is CVE-2026-43275?

A vulnerability in the Linux kernel's UFS driver configuration can lead to system crashes due to improper exception event handling during power management states. When the runtime power management level is set to zero, the driver fails to flush pending exception tasks, creating a race condition. This could result in attempts by the driver to access the host controller while the system is in a deep power-down state. The corrective action ensures that all exception tasks are completed before entering this state, thereby preventing illegal hardware access and enhancing system stability.

References