PT-2026-38993 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43342

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the USB gadget RNDIS driver where class, subclass, and protocol options can be accessed concurrently through configfs. This issue was discovered during code inspection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-43342

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/209decd3f7901df9842b83f2540dc8685e344a07 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43342 · Vendor Advisory
• https://git.kernel.org/stable/c/8d8c68b1fc06ece60cf43e1306ff0f4ac121547e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43342 · Vendor Advisory
• https://git.kernel.org/stable/c/c1b3d5b0acb194efe20fc5864ee03439fa7bd45c · Patch
• https://cve.org/CVERecord?id=CVE-2026-43342 · Security Note
• https://git.kernel.org/stable/c/7d8fa3b8783ab95a46e20d97fbeeede719b2efda · Patch
• https://git.kernel.org/stable/c/446f1842cda929c40d4697722bfdcfb334bc9692 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43342 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43342 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43342 · Vendor Advisory
• https://git.kernel.org/stable/c/cb5316b37288ab8791584e32f114c4f41ad45b67 · Patch
• https://git.kernel.org/stable/c/65b7dbf80a1627667c241fff7c1c224f3118014f · Patch
• https://git.kernel.org/stable/c/0a75d97c53477a59c0aa1c65f69038c719f9c5b8 · Patch
• https://ubuntu.com/security/CVE-2026-43342 · Vendor Advisory