Riskcovery

CVE-2026-64345

usb: gadget: f_printer: take kref only for successful open

State
Published
Severity
Not scored
Published
Jul 25, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_printer: take kref only for successful open

printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference.

Move kref_get() into the successful-open branch.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before 94ec20d97aa51547965a539f660a1fe79c6929a3Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before a12d81a9cc2a012a24ecb7f9ba076b9f7c179bd3Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before 75c0ad13e136961328253742501b4efc3988a587Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before bf20c94fa6aaff945f0ae3a23f3212cd299f28d9Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before 8a5eba992c862b0c94411eecf9b7121e8636db38Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before 7f1f24c367938c5537e2308bf9a965f051d14774Affected
  • e8d5f92b8d30bb4ade76494490c3c065e12411b1 to before 30adce93d5c4a5a1ec29d9249e3fdfcc391d406bAffected
  • 25c95c6bd4dc50a3c20de0fa7f450ea02b2320fcAffected
  • 4a47581cf010dc351d8069978080fdb000c0776dAffected
  • d9fe88b2a38dc700bf5bd3a09c7cd11bbc248367Affected
  • cedb0187b8ba929c3f76f28e6bc25804d65f8a54Affected
  • e9e791f5c39ab30e374a3b1a9c25ca7ff24988f3Affected
  • 34f026263889e2827e04acdc3a0eb9ecbd191ef0Affected
  • 5f845e5d18d151230476cf90aa46449f69ba2ef1Affected
  • 4.4.241 to before 4.5Affected
  • 4.9.241 to before 4.10Affected
  • 4.14.203 to before 4.15Affected
  • 4.19.154 to before 4.20Affected
  • 5.4.73 to before 5.5Affected
  • 5.8.17 to before 5.9Affected
  • 5.9.2 to before 5.10Affected
LinuxLinux
  • 5.10Affected
  • before 5.10Not affected
  • 5.10.261 through 5.10.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.96 through 6.12.*Not affected
  • 6.18.39 through 6.18.*Not affected
  • 7.1.4 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.