In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_printer: take kref only for successful open

printer_open() returns -EBUSY when the character device is already
open, but it increments dev->kref regardless of the return value. VFS
does not call ->release() for a failed open, so every rejected second
open permanently leaks one reference.

Move kref_get() into the successful-open branch.

https://git.kernel.org/stable/c/30adce93d5c4a5a1ec29d9249e3fdfcc391d406b

https://git.kernel.org/stable/c/75c0ad13e136961328253742501b4efc3988a587

https://git.kernel.org/stable/c/7f1f24c367938c5537e2308bf9a965f051d14774

https://git.kernel.org/stable/c/8a5eba992c862b0c94411eecf9b7121e8636db38

https://git.kernel.org/stable/c/94ec20d97aa51547965a539f660a1fe79c6929a3

https://git.kernel.org/stable/c/bf20c94fa6aaff945f0ae3a23f3212cd299f28d9

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/usb/gadget/function/f_printer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"94ec20d97aa51547965a539f660a1fe79c6929a3","versionType":"git","status":"affected"},{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"75c0ad13e136961328253742501b4efc3988a587","versionType":"git","status":"affected"},{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"bf20c94fa6aaff945f0ae3a23f3212cd299f28d9","versionType":"git","status":"affected"},{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"8a5eba992c862b0c94411eecf9b7121e8636db38","versionType":"git","status":"affected"},{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"7f1f24c367938c5537e2308bf9a965f051d14774","versionType":"git","status":"affected"},{"version":"e8d5f92b8d30bb4ade76494490c3c065e12411b1","lessThan":"30adce93d5c4a5a1ec29d9249e3fdfcc391d406b","versionType":"git","status":"affected"},{"version":"25c95c6bd4dc50a3c20de0fa7f450ea02b2320fc","versionType":"git","status":"affected"},{"version":"4a47581cf010dc351d8069978080fdb000c0776d","versionType":"git","status":"affected"},{"version":"d9fe88b2a38dc700bf5bd3a09c7cd11bbc248367","versionType":"git","status":"affected"},{"version":"cedb0187b8ba929c3f76f28e6bc25804d65f8a54","versionType":"git","status":"affected"},{"version":"e9e791f5c39ab30e374a3b1a9c25ca7ff24988f3","versionType":"git","status":"affected"},{"version":"34f026263889e2827e04acdc3a0eb9ecbd191ef0","versionType":"git","status":"affected"},{"version":"5f845e5d18d151230476cf90aa46449f69ba2ef1","versionType":"git","status":"affected"},{"version":"4.4.241","lessThan":"4.5","versionType":"semver","status":"affected"},{"version":"4.9.241","lessThan":"4.10","versionType":"semver","status":"affected"},{"version":"4.14.203","lessThan":"4.15","versionType":"semver","status":"affected"},{"version":"4.19.154","lessThan":"4.20","versionType":"semver","status":"affected"},{"version":"5.4.73","lessThan":"5.5","versionType":"semver","status":"affected"},{"version":"5.8.17","lessThan":"5.9","versionType":"semver","status":"affected"},{"version":"5.9.2","lessThan":"5.10","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/usb/gadget/function/f_printer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.10","status":"affected"},{"version":"0","lessThan":"5.10","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.96","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.39","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.4","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]