CVE-2026-43415

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend

In __ufshcd_wl_suspend(), cancel_delayed_work_sync() is called to cancel

the UFS RTC work, but it is placed after ufshcd_vops_suspend(hba, pm_op,

POST_CHANGE). This creates a race condition where ufshcd_rtc_work() can

still be running while ufshcd_vops_suspend() is executing. When

UFSHCD_CAP_CLK_GATING is not supported, the condition

!hba->clk_gating.active_reqs is always true, causing ufshcd_update_rtc()

to be executed. Since ufshcd_vops_suspend() typically performs clock

gating operations, executing ufshcd_update_rtc() at that moment triggers

an SError. The kernel panic trace is as follows:

Kernel panic - not syncing: Asynchronous SError Interrupt

Call trace:

dump_backtrace+0xec/0x128

show_stack+0x18/0x28

dump_stack_lvl+0x40/0xa0

dump_stack+0x18/0x24

panic+0x148/0x374

nmi_panic+0x3c/0x8c

arm64_serror_panic+0x64/0x8c

do_serror+0xc4/0xc8

el

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References