Linux Kernel Vulnerability in UFS Command Trace by Vendor

CVE-2026-43471

What is CVE-2026-43471?

A vulnerability exists in the Linux kernel related to the UFS command trace functionality, leading to a potential kernel crash. This issue arises when a NULL pointer is dereferenced during the execution of the 'ufshcd_add_command_trace' function due to a failed hardware queue assignment. The bug fix involves incorporating a NULL check prior to accessing the hardware queue's ID field, thus enhancing kernel stability and security. Affected versions may experience significant operational disruptions if this flaw is exploited.

References