CVE-2026-43342

medium Red Hat
EPSS Score
0.0%
Exploitation probability in 30 days
Top 93% most likely to be exploited
Published: May 8, 2026 (6 days ago)
Last Modified: May 8, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in the Linux kernel's USB gadget RNDIS (Remote Network Driver Interface Specification) function. This vulnerability arises from race conditions when RNDIS options are accessed concurrently through configfs, a file system that allows user-space programs to create and manage kernel objects. An attacker could potentially exploit this race condition to cause unexpected behavior or system instability.

CWE

CWE-820

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References