In the Linux kernel, the printer_open() function incorrectly increments the device reference counter dev->kref even when it returns an error, causing a persistent reference counter leak each time a second open attempt fails. This flaw can lead to a gradual accumulation of unreleased references, which may degrade kernel resource reliability. The weakness is identified as a reference count leak (CWE‑911).

The vulnerability affects all Linux kernel versions that include the f_printer gadget before the commit that moves kref_get() into the successful‑open path. The CNA lists the Linux kernel product with no specific version constraints beyond the presence of f_printer, including early release candidates of kernel 7.2.

The CVSS score of 5.5 indicates medium severity, and the EPSS score is less than 1 %, implying a very low likelihood of exploitation. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that a local attacker who can repeatedly open the /dev/usb‑ff‑printer device after an initial successful open could accumulate unreleased references, potentially leading to kernel resource exhaustion.