CVE-2026-68369usb: gadget: printer: fix infinite loop in printer_read()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printer_read() printer_read() uses the same variable for the requested copy size and the number of bytes actually copied to user space. copy_to_user() returns the number of bytes not copied, so when it fails to copy anything, the computed copied length becomes zero. In that case len, buf, current_rx_bytes and current_rx_buf are left unchanged. If RX data is available and the user buffer remains unwritable, the read loop can repeat indefinitely. Track the copied length separately and return -EFAULT, or the number of bytes already copied, if an iteration makes no progress.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b185f01a9ab7af586133be2555298e960237359b before 3f81197364b57e5318620c75f3bd63f405f60552; from b185f01a9ab7af586133be2555298e960237359b before e225e2998e5a9b83c838dbbe4511fb0d63f88daf; from b185f01a9ab7af586133be2555298e960237359b before 3081b0e187065c3b9577e393ad664b12854aeaf3; from b185f01a9ab7af586133be2555298e960237359b before 994afccfdcceb73be33f69a8a8ea71e260c9eca5; from b185f01a9ab7af586133be2555298e960237359b before e03597ad9494b500344076589aeaa6c6d2d381d3; from b185f01a9ab7af586133be2555298e960237359b before 4cde0b38cc0cb8b7dc17295801015148de37d1d2; from b185f01a9ab7af586133be2555298e960237359b before e41bbbbb1740ce4d7270ab1cdeca13892d6a8d2e; from b185f01a9ab7af586133be2555298e960237359b before c2e819be6a5c7f34344926b4bd7e3dfca58cf48a | CNA record |
References
- https://git.kernel.org/stable/c/3f81197364b57e5318620c75f3bd63f405f60552
- https://git.kernel.org/stable/c/e225e2998e5a9b83c838dbbe4511fb0d63f88daf
- https://git.kernel.org/stable/c/3081b0e187065c3b9577e393ad664b12854aeaf3
- https://git.kernel.org/stable/c/994afccfdcceb73be33f69a8a8ea71e260c9eca5
- https://git.kernel.org/stable/c/e03597ad9494b500344076589aeaa6c6d2d381d3
- https://git.kernel.org/stable/c/4cde0b38cc0cb8b7dc17295801015148de37d1d2
- https://git.kernel.org/stable/c/e41bbbbb1740ce4d7270ab1cdeca13892d6a8d2e
- https://git.kernel.org/stable/c/c2e819be6a5c7f34344926b4bd7e3dfca58cf48a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.