What’s Vulnerable › Vulnerabilities

CVE-2026-43343: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-08 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but geth_free() fails to decrement it. This prevents the configuration of attributes via configfs after unlinking the function. Decrement the reference count in geth_free() to ensure proper cleanup.

Affected products

• Linux kernel: from 3.11 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22 — fixed in 5.10.253, 5.15.203, 6.1.168, 6.12.81, 6.18.22, 6.19.12

How to fix

Upgrade to a fixed version: Linux kernel 5.10.253, 5.15.203, 6.1.168, 6.12.81. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/23e4851ce348a329d974e84e828155dda9f52122
• https://git.kernel.org/stable/c/3d436670b47415da042452618fb5d8e317ab095f
• https://git.kernel.org/stable/c/3f5bfc550a40d7493b1cf09540ed6b412b3b82be
• https://git.kernel.org/stable/c/75776a055b656873319c3830fed471daef3ceb23
• https://git.kernel.org/stable/c/a932b171554714b1bca313b853c7aa9f2930f9aa
• https://git.kernel.org/stable/c/caa27923aacd8a5869207842f2ab1657c6c0c7bc
• https://git.kernel.org/stable/c/cc8ec610cd14c093a19371691a7ce1ee5421e829
• https://git.kernel.org/stable/c/d7d702407b61e96286a15b6e715572f541a8d41c

Get alerted when CVE-2026-43343 or the next vulnerability affects your stack