CVE-2026-43342

Katalog CVE

CVSS 4.7 · Medium EPSS 0,11%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada linux kernel. Skor CVSS 3.1 4.7 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Protect RNDIS options with mutex The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs. Use existing mutex to protect these options. This issue was identified during code inspection.

Rincian

Terbit di NVD

8 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,11% peluang dieksploitasi; lebih tinggi dari 1,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0a75d97c53477a59c0aa1c65f69038c719f9c5b8 patch
• https://git.kernel.org/stable/c/209decd3f7901df9842b83f2540dc8685e344a07 patch
• https://git.kernel.org/stable/c/446f1842cda929c40d4697722bfdcfb334bc9692 patch
• https://git.kernel.org/stable/c/65b7dbf80a1627667c241fff7c1c224f3118014f patch
• https://git.kernel.org/stable/c/7d8fa3b8783ab95a46e20d97fbeeede719b2efda patch
• https://git.kernel.org/stable/c/8d8c68b1fc06ece60cf43e1306ff0f4ac121547e patch
• https://git.kernel.org/stable/c/c1b3d5b0acb194efe20fc5864ee03439fa7bd45c patch
• https://git.kernel.org/stable/c/cb5316b37288ab8791584e32f114c4f41ad45b67 patch