CVE-2026-43342
usb: gadget: f_rndis: Protect RNDIS options with mutex
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This issue was identified during code inspection.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
4.14
References 8
git.kernel.org
- stable/c/0a75d97c53477a59c0aa1c65f69038c719f9c5b8
- stable/c/c1b3d5b0acb194efe20fc5864ee03439fa7bd45c
- stable/c/65b7dbf80a1627667c241fff7c1c224f3118014f
- stable/c/cb5316b37288ab8791584e32f114c4f41ad45b67
- stable/c/7d8fa3b8783ab95a46e20d97fbeeede719b2efda
- stable/c/446f1842cda929c40d4697722bfdcfb334bc9692
- stable/c/209decd3f7901df9842b83f2540dc8685e344a07
- stable/c/8d8c68b1fc06ece60cf43e1306ff0f4ac121547e