CVE-2026-43353 i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
A race condition in the Linux kernel's MIPI I3C HCI driver allows concurrent timeouts to corrupt DMA ring state, potentially causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43353?
CVE-2026-43353 is a high-severity vulnerability in Linux kernel, published on 8 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
i3c: mipi-i3c-hci: Fix race in DMA ring dequeue
The HCI DMA dequeue path (hci_dma_dequeue_xfer()) may be invoked for multiple transfers that timeout around the same time. However, the function is not serialized and can race with itself.
When a timeout occurs, hci_dma_dequeue_xfer() stops the ring, processes incomplete transfers, and then restarts the ring. If another timeout triggers a parallel call into the same function, the two instances may interfere with each other - stopping or restarting the ring at unexpected times.
Add a mutex so that hci_dma_dequeue_xfer() is serialized with respect to itself.
Weakness: CWE-362
Which versions are affected by CVE-2026-43353?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43353?
Apply the vendor's patch.
Is CVE-2026-43353 being exploited?
There is no known exploitation of CVE-2026-43353 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43353, DEBIAN-CVE-2026-43353, GHSA-473v-h78r-2j73, ROOT-OS-DEBIAN-12-CVE-2026-43353, ROOT-OS-DEBIAN-13-CVE-2026-43353, ROOT-OS-UBUNTU-2204-CVE-2026-43353 and 2 more.