CVE-2026-64345

Summary

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_printer: take kref only for successful open

printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference.

Move kref_get() into the successful-open branch.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < 94ec20d97aa51547965a539f660a1fe79c6929a3affected
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < 75c0ad13e136961328253742501b4efc3988a587affected
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < bf20c94fa6aaff945f0ae3a23f3212cd299f28d9affected
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < 8a5eba992c862b0c94411eecf9b7121e8636db38affected
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < 7f1f24c367938c5537e2308bf9a965f051d14774affected
LinuxLinuxe8d5f92b8d30bb4ade76494490c3c065e12411b1 < 30adce93d5c4a5a1ec29d9249e3fdfcc391d406baffected
LinuxLinux25c95c6bd4dc50a3c20de0fa7f450ea02b2320fcaffected
LinuxLinux4a47581cf010dc351d8069978080fdb000c0776daffected
LinuxLinuxd9fe88b2a38dc700bf5bd3a09c7cd11bbc248367affected
LinuxLinuxcedb0187b8ba929c3f76f28e6bc25804d65f8a54affected
LinuxLinuxe9e791f5c39ab30e374a3b1a9c25ca7ff24988f3affected
LinuxLinux34f026263889e2827e04acdc3a0eb9ecbd191ef0affected
LinuxLinux5f845e5d18d151230476cf90aa46449f69ba2ef1affected
LinuxLinux4.4.241 < 4.5affected
LinuxLinux4.9.241 < 4.10affected
LinuxLinux4.14.203 < 4.15affected
LinuxLinux4.19.154 < 4.20affected
LinuxLinux5.4.73 < 5.5affected
LinuxLinux5.8.17 < 5.9affected
LinuxLinux5.9.2 < 5.10affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.96 <= 6.12.*unaffected
LinuxLinux6.18.39 <= 6.18.*unaffected
LinuxLinux7.1.4 <= 7.1.*unaffected
LinuxLinux7.2-rc3 <= *unaffected

Weaknesses

References