CVE-2026-43342

kernel: usb: gadget: f_rndis: Protect RNDIS options with mutex

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's USB gadget RNDIS (Remote Network Driver Interface Specification) function. This vulnerability arises from race conditions when RNDIS options are accessed concurrently through configfs, a file system that allows user-space programs to create and manage kernel objects. An attacker could potentially exploit this race condition to cause unexpected behavior or system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-820 · Missing Synchronization