CVE-2026-64345: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference. Move kref_get() into the successful-open branch.

Засегнати продукти

• Linux Linux: e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди 94ec20d97aa51547965a539f660a1fe79c6929a3; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди a12d81a9cc2a012a24ecb7f9ba076b9f7c179bd3; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди 75c0ad13e136961328253742501b4efc3988a587; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди bf20c94fa6aaff945f0ae3a23f3212cd299f28d9; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди 8a5eba992c862b0c94411eecf9b7121e8636db38; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди 7f1f24c367938c5537e2308bf9a965f051d14774; e8d5f92b8d30bb4ade76494490c3c065e12411b1 преди 30adce93d5c4a5a1ec29d9249e3fdfcc391d406b; 25c95c6bd4dc50a3c20de0fa7f450ea02b2320fc; 4a47581cf010dc351d8069978080fdb000c0776d; d9fe88b2a38dc700bf5bd3a09c7cd11bbc248367; cedb0187b8ba929c3f76f28e6bc25804d65f8a54; e9e791f5c39ab30e374a3b1a9c25ca7ff24988f3; 34f026263889e2827e04acdc3a0eb9ecbd191ef0; 5f845e5d18d151230476cf90aa46449f69ba2ef1; 4.4.241 преди 4.5; 4.9.241 преди 4.10; 4.14.203 преди 4.15; 4.19.154 преди 4.20; 5.4.73 преди 5.5; 5.8.17 преди 5.9; 5.9.2 преди 5.10
• Linux Linux: 5.10; преди 5.10; 5.10.261 до 5.10.*; 6.1.191 до 6.1.*; 6.6.145 до 6.6.*; 6.12.96 до 6.12.*; 6.18.39 до 6.18.*; 7.1.4 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-64345
• https://nvd.nist.gov/vuln/detail/CVE-2026-64345
• https://git.kernel.org/stable/c/94ec20d97aa51547965a539f660a1fe79c6929a3
• https://git.kernel.org/stable/c/a12d81a9cc2a012a24ecb7f9ba076b9f7c179bd3
• https://git.kernel.org/stable/c/75c0ad13e136961328253742501b4efc3988a587
• https://git.kernel.org/stable/c/bf20c94fa6aaff945f0ae3a23f3212cd299f28d9
• https://git.kernel.org/stable/c/8a5eba992c862b0c94411eecf9b7121e8636db38
• https://git.kernel.org/stable/c/7f1f24c367938c5537e2308bf9a965f051d14774
• https://git.kernel.org/stable/c/30adce93d5c4a5a1ec29d9249e3fdfcc391d406b