CVE-2026-68369

usb: gadget: printer: fix infinite loop in printer_read()

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: printer: fix infinite loop in printer_read()

printer_read() uses the same variable for the requested copy size and the number of bytes actually copied to user space. copy_to_user() returns the number of bytes not copied, so when it fails to copy anything, the computed copied length becomes zero.

In that case len, buf, current_rx_bytes and current_rx_buf are left unchanged. If RX data is available and the user buffer remains unwritable, the read loop can repeat indefinitely.

Track the copied length separately and return -EFAULT, or the number of bytes already copied, if an iteration makes no progress.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b185f01a9ab7af586133be2555298e960237359b to before 3f81197364b57e5318620c75f3bd63f405f60552Affected b185f01a9ab7af586133be2555298e960237359b to before e225e2998e5a9b83c838dbbe4511fb0d63f88dafAffected b185f01a9ab7af586133be2555298e960237359b to before 3081b0e187065c3b9577e393ad664b12854aeaf3Affected b185f01a9ab7af586133be2555298e960237359b to before 994afccfdcceb73be33f69a8a8ea71e260c9eca5Affected b185f01a9ab7af586133be2555298e960237359b to before e03597ad9494b500344076589aeaa6c6d2d381d3Affected b185f01a9ab7af586133be2555298e960237359b to before 4cde0b38cc0cb8b7dc17295801015148de37d1d2Affected b185f01a9ab7af586133be2555298e960237359b to before e41bbbbb1740ce4d7270ab1cdeca13892d6a8d2eAffected b185f01a9ab7af586133be2555298e960237359b to before c2e819be6a5c7f34344926b4bd7e3dfca58cf48aAffected
LinuxLinux	4.1Affected before 4.1Not affected 5.10.265 through 5.10.Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

b185f01a9ab7af586133be2555298e960237359b to before 3f81197364b57e5318620c75f3bd63f405f60552Affected
b185f01a9ab7af586133be2555298e960237359b to before e225e2998e5a9b83c838dbbe4511fb0d63f88dafAffected
b185f01a9ab7af586133be2555298e960237359b to before 3081b0e187065c3b9577e393ad664b12854aeaf3Affected
b185f01a9ab7af586133be2555298e960237359b to before 994afccfdcceb73be33f69a8a8ea71e260c9eca5Affected
b185f01a9ab7af586133be2555298e960237359b to before e03597ad9494b500344076589aeaa6c6d2d381d3Affected
b185f01a9ab7af586133be2555298e960237359b to before 4cde0b38cc0cb8b7dc17295801015148de37d1d2Affected
b185f01a9ab7af586133be2555298e960237359b to before e41bbbbb1740ce4d7270ab1cdeca13892d6a8d2eAffected
b185f01a9ab7af586133be2555298e960237359b to before c2e819be6a5c7f34344926b4bd7e3dfca58cf48aAffected

LinuxLinux

4.1Affected
before 4.1Not affected
5.10.265 through 5.10.*Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.