CVE-2026-43421 is a newly published Linux kernel vulnerability, added to the NVD dataset on May 8, 2026, covering a USB gadget f_ncm driver bug where a network device could outlive its parent gadget device during disconnect handling. The short version sounds microscopic: a net_device moved at...
CVE-2026-31723 is a medium-severity Linux kernel flaw published on May 1, 2026, involving the USB gadget f_subset driver, where a network device can outlive its sysfs parent during bind and unbind cycles and leave broken kernel device links behind. It is not the kind of bug that should send...
The Linux kernel’s CVE-2026-23320 is a reminder that some security issues are less about dramatic code execution and more about getting object lifetimes exactly right. In this case, the vulnerable path sits in usb: gadget: f_ncm, where the net_device was being created too early and destroyed too...