USB Gadget RNDIS Race Condition Fixed

Publication date: 2026-05-08

Last updated on: 2026-05-18

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This issue was identified during code inspection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-08

Last Modified

2026-05-18

Generated

2026-07-09

AI Q&A

2026-05-08

EPSS Evaluated

2026-07-08

NVD

CVE-2026-43342

EUVD

EUVD-2026-28626

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	7.0
linux	linux_kernel	From 5.11 (inc) to 5.15.203 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.22 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.168 (exc)
linux	linux_kernel	From 4.14 (inc) to 5.10.253 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.12 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.81 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.134 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-362	The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's USB gadget function, specifically in the f_rndis module. The issue involves race conditions affecting the class, subclass, and protocol options, which can be accessed concurrently through configfs. Because these options were not properly protected, concurrent access could lead to unexpected behavior. The vulnerability was fixed by using an existing mutex to protect these options, preventing simultaneous access and eliminating the race condition.

Impact Analysis

The vulnerability could lead to race conditions when accessing certain USB gadget configuration options concurrently. This might cause instability or unpredictable behavior in the affected system's USB functionality. However, the exact impact depends on how the system uses the f_rndis module and whether concurrent access to these options occurs in practice.

Hi! I’m here to help you understand CVE-2026-43342. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70