CVE-2026-64345
kernel: usb: gadget: f_printer: take kref only for successful open
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · July 29, 2026
Description
A flaw was found in the Linux kernel's USB printer gadget driver. The printer_open() function incorrectly increments a reference counter even when the device is already in use and the open operation fails. This prevents the reference from being properly released, leading to a permanent leak of system resources. Over time, repeated failed attempts to open the printer device can exhaust available resources, potentially causing a denial of service (DoS) for affected systems.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count