CVE-2026-43427

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: class: cdc-wdm: fix reordering issue in read code path<br /> <br /> Quoting the bug report:<br /> <br /> Due to compiler optimization or CPU out-of-order execution, the<br /> desc-&gt;length update can be reordered before the memmove. If this<br /> happens, wdm_read() can see the new length and call copy_to_user() on<br /> uninitialized memory. This also violates LKMM data race rules [1].<br /> <br /> Fix it by using WRITE_ONCE and memory barriers.