CVE-2026-43342: usb: gadget: f_rndis: Protect RNDIS options with mutex
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: frndis: Protect RNDIS options with mutex
The class/subclass/protocol options are suspectible to race conditions as they can be accessed concurrently through configfs.
Use existing mutex to protect these options. This issue was identified during code inspection.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43342?
CVE-2026-43342 has a medium severity level due to potential race conditions allowing concurrent access issues.
How do I fix CVE-2026-43342?
To resolve CVE-2026-43342, update your Linux kernel to the latest version that includes the fix for the mutex protection of RNDIS options.
What systems are affected by CVE-2026-43342?
CVE-2026-43342 affects the Linux kernel, specifically in the USB gadget functionalities involving RNDIS.
What type of vulnerability is CVE-2026-43342?
CVE-2026-43342 is a race condition vulnerability that occurs due to concurrent access to RNDIS configuration options.
Is there a known exploit for CVE-2026-43342?
There are no public exploits specifically for CVE-2026-43342 reported as of now, but it poses a risk in vulnerable environments.