Orta CVSS 5.5
CVE-2026-64345: Linux Kernel: güvenlik açığı
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference. Move kref_get() into the successful-open branch.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,12 (yüzdelik 2)
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 4.4.241 | — | 4.5 |
| linux-linux-kernel | 4.9.241 | — | 4.10 |
| linux-linux-kernel | 4.14.203 | — | 4.15 |
| linux-linux-kernel | 4.19.154 | — | 4.20 |
| linux-linux-kernel | 5.4.73 | — | 5.5 |
| linux-linux-kernel | 5.8.17 | — | 5.9 |
| linux-linux-kernel | 5.9.2 | — | 5.10.261 |
| linux-linux-kernel | 5.11 | — | 6.6.145 |
| linux-linux-kernel | 6.7 | — | 6.12.96 |
| linux-linux-kernel | 6.13 | — | 6.18.39 |
| linux-linux-kernel | 6.19 | — | 7.1.4 |
| linux-linux-kernel | 7.2 | 7.2 | — |
| linux-linux-kernel | 7.2 | 7.2 | — |