CVE-2026-43343

A flaw was found in the usb: gadget: f_subset module of the Linux kernel. The geth_free() function fails to decrement a reference count that was incremented by geth_alloc(). This unbalanced reference count can lead to a resource leak, preventing the configuration of attributes through the configfs interface after a function has been unlinked. This can result in a denial of service for specific USB gadget configurations.