Linux Kernel USB Device Disconnect Vulnerability in LAN78XX Module

CVE-2026-43479

What is CVE-2026-43479?

A vulnerability exists in the Linux kernel's handling of the LAN78XX USB device during the disconnection process. Specifically, a redundant call to netif_napi_del() in the disconnect path may trigger a warning when NAPI is still enabled, even though the call is unnecessary. The removal of this redundant call ensures that NAPI teardown is handled automatically by unregister_netdev(), thereby preventing the unnecessary warnings and improving the overall stability of USB device management.

References