CVE-2026-64345

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
25/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> usb: gadget: f_printer: take kref only for successful open<br /> <br /> printer_open() returns -EBUSY when the character device is already<br /> open, but it increments dev-&gt;kref regardless of the return value. VFS<br /> does not call -&gt;release() for a failed open, so every rejected second<br /> open permanently leaks one reference.<br /> <br /> Move kref_get() into the successful-open branch.

Impact