Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-64345

usb: gadget: f_printer: take kref only for successful open

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference. Move kref_get() into the successful-open branch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < 94ec20d97aa51547965a539f660a1fe79c6929a3affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < 75c0ad13e136961328253742501b4efc3988a587affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < bf20c94fa6aaff945f0ae3a23f3212cd299f28d9affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < 8a5eba992c862b0c94411eecf9b7121e8636db38affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < 7f1f24c367938c5537e2308bf9a965f051d14774affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to < 30adce93d5c4a5a1ec29d9249e3fdfcc391d406baffected
  • 25c95c6bd4dc50a3c20de0fa7f450ea02b2320fcaffected
  • 4a47581cf010dc351d8069978080fdb000c0776daffected
  • d9fe88b2a38dc700bf5bd3a09c7cd11bbc248367affected
  • cedb0187b8ba929c3f76f28e6bc25804d65f8a54affected
  • e9e791f5c39ab30e374a3b1a9c25ca7ff24988f3affected
  • 34f026263889e2827e04acdc3a0eb9ecbd191ef0affected
  • 5f845e5d18d151230476cf90aa46449f69ba2ef1affected
  • 4.4.241 to < 4.5affected
  • 4.9.241 to < 4.10affected
  • 4.14.203 to < 4.15affected
  • 4.19.154 to < 4.20affected
  • 5.4.73 to < 5.5affected
  • 5.8.17 to < 5.9affected
  • 5.9.2 to < 5.10affected

Linux Linux

Default version status: affected

  • 5.10affected
  • 0 to < 5.10unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References