CVE-2026-43342
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs.
Does this matter?
Lower severity and a low EPSS score (0.09%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This issue was identified during code inspection.
- CVSS 3.1
- 4.7 MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.09% probability · 0th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/0a75d97c53477a59c0aa1c65f69038c719f9c5b8Patch
- https://git.kernel.org/stable/c/209decd3f7901df9842b83f2540dc8685e344a07Patch
- https://git.kernel.org/stable/c/446f1842cda929c40d4697722bfdcfb334bc9692Patch
- https://git.kernel.org/stable/c/65b7dbf80a1627667c241fff7c1c224f3118014fPatch
- https://git.kernel.org/stable/c/7d8fa3b8783ab95a46e20d97fbeeede719b2efdaPatch
- https://git.kernel.org/stable/c/8d8c68b1fc06ece60cf43e1306ff0f4ac121547ePatch
- https://git.kernel.org/stable/c/c1b3d5b0acb194efe20fc5864ee03439fa7bd45cPatch
- https://git.kernel.org/stable/c/cb5316b37288ab8791584e32f114c4f41ad45b67Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.