CVE-2026-64345None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardl…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_printer: take kref only for successful open
printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference.
Move kref_get() into the successful-open branch.
Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < 94ec20d97aa51547965a539f660a1fe79c6929a3Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < a12d81a9cc2a012a24ecb7f9ba076b9f7c179bd3Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < 75c0ad13e136961328253742501b4efc3988a587Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < bf20c94fa6aaff945f0ae3a23f3212cd299f28d9Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < 8a5eba992c862b0c94411eecf9b7121e8636db38Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < 7f1f24c367938c5537e2308bf9a965f051d14774Linux >= e8d5f92b8d30bb4ade76494490c3c065e12411b1 < 30adce93d5c4a5a1ec29d9249e3fdfcc391d406bLinux 25c95c6bd4dc50a3c20de0fa7f450ea02b2320fcLinux 4a47581cf010dc351d8069978080fdb000c0776dLinux d9fe88b2a38dc700bf5bd3a09c7cd11bbc248367Linux cedb0187b8ba929c3f76f28e6bc25804d65f8a54Linux e9e791f5c39ab30e374a3b1a9c25ca7ff24988f3Linux 34f026263889e2827e04acdc3a0eb9ecbd191ef0Linux 5f845e5d18d151230476cf90aa46449f69ba2ef1Linux >= 4.4.241 < 4.5Linux >= 4.9.241 < 4.10Linux >= 4.14.203 < 4.15Linux >= 4.19.154 < 4.20Linux >= 5.4.73 < 5.5Linux >= 5.8.17 < 5.9Linux >= 5.9.2 < 5.10Linux 5.10Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99284Nonenet: skbuff: propagate shared-frag marker in skb_zerocopy()
CVE-2026-99283Nonenetfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
CVE-2026-99272Nonesmb: client: validate the data area in SMB2_read()
CVE-2026-99271NoneALSA: line6: Clear prev_fbuf on capture buffer release
CVE-2026-99273Noneksmbd: reserve space for the UTF-16 terminator in stream info
CVE-2026-99275Nonesmb: client: reject short SESSION_SETUP responses