In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_subset: Fix unbalanced refcnt in geth_free geth_alloc() increments the reference count, but geth_free() fails to decrement it. This prevents the configuration of attributes via configfs after unlinking the function. Decrement the reference count in geth_free() to ensure proper cleanup.

A flaw was found in the `usb: gadget: f_subset` module of the Linux kernel. The `geth_free()` function fails to decrement a reference count that was incremented by `geth_alloc()`. This unbalanced reference count can lead to a resource leak, preventing the configuration of attributes through the configfs interface after a function has been unlinked. This can result in a denial of service for specific USB gadget configurations.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-43343 https://nvd.nist.gov/vuln/detail/CVE-2026-43343 https://lore.kernel.org/linux-cve-announce/2026050825-CVE-2026-43343-637d@gregkh/T