CVE-2026-43342

usb: gadget: f_rndis: Protect RNDIS options with mutex

State: Published
Severity: Not scored
Published: May 8, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_rndis: Protect RNDIS options with mutex

The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs.

Use existing mutex to protect these options. This issue was identified during code inspection.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	73517cf49bd449122b615d2b7a6bb835f02252e5 to before 0a75d97c53477a59c0aa1c65f69038c719f9c5b8Affected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before c1b3d5b0acb194efe20fc5864ee03439fa7bd45cAffected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before 65b7dbf80a1627667c241fff7c1c224f3118014fAffected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before cb5316b37288ab8791584e32f114c4f41ad45b67Affected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before 7d8fa3b8783ab95a46e20d97fbeeede719b2efdaAffected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before 446f1842cda929c40d4697722bfdcfb334bc9692Affected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before 209decd3f7901df9842b83f2540dc8685e344a07Affected 73517cf49bd449122b615d2b7a6bb835f02252e5 to before 8d8c68b1fc06ece60cf43e1306ff0f4ac121547eAffected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.168 through 6.1.Not affected 6.6.134 through 6.6.Not affected 6.12.81 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

73517cf49bd449122b615d2b7a6bb835f02252e5 to before 0a75d97c53477a59c0aa1c65f69038c719f9c5b8Affected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before c1b3d5b0acb194efe20fc5864ee03439fa7bd45cAffected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before 65b7dbf80a1627667c241fff7c1c224f3118014fAffected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before cb5316b37288ab8791584e32f114c4f41ad45b67Affected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before 7d8fa3b8783ab95a46e20d97fbeeede719b2efdaAffected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before 446f1842cda929c40d4697722bfdcfb334bc9692Affected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before 209decd3f7901df9842b83f2540dc8685e344a07Affected
73517cf49bd449122b615d2b7a6bb835f02252e5 to before 8d8c68b1fc06ece60cf43e1306ff0f4ac121547eAffected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.168 through 6.1.*Not affected
6.6.134 through 6.6.*Not affected
6.12.81 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.