CVE-2026-43343

Published: May 8, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but geth_free() fails to decrement it. This prevents the configuration of attributes via configfs after unlinking the function. Decrement the reference count in geth_free() to ensure proper cleanup.

Affected (13)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	3.11 ≤ version < 5.10.253
Linux Linux Kernel	5.11 ≤ version < 5.15.203
Linux Linux Kernel	5.16 ≤ version < 6.1.168
Linux Linux Kernel	6.13 ≤ version < 6.18.22
Linux Linux Kernel	6.19 ≤ version < 6.19.12
Linux Linux Kernel	6.2 ≤ version < 6.6.134
Linux Linux Kernel	6.7 ≤ version < 6.12.81
Linux Linux Kernel	Version 7.0 rc1
Linux Linux Kernel	Version 7.0 rc2
Linux Linux Kernel	Version 7.0 rc3
Linux Linux Kernel	Version 7.0 rc4
Linux Linux Kernel	Version 7.0 rc5
Linux Linux Kernel	Version 7.0 rc6