CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's USB gadget subsystem, specifically the printer function, where an improper reference counting mechanism can lead to a memory leak when attempting to open an already open character device. This flaw allows for a persistent increase in reference counts without proper release, potentially exhausting system resources over time. Organizations using Linux-based systems, particularly those implementing USB printer functionalities, should prioritize addressing this issue to prevent resource depletion and ensure system stability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_printer: take kref only for successful open printer_open() returns -EBUSY when the character device is already open, but it increments dev->kref regardless of the return value. VFS does not call ->release() for a failed open, so every rejected second open permanently leaks one reference. Move kref_get() into the successful-open branch.