The f_printer USB gadget in the Linux kernel increments the device reference counter even when an open attempt fails, leaking a reference each time. The erroneous increment is not paired with a corresponding decrement, allowing cumulative resource loss at the kernel level. This flaw can eventually exhaust kernel memory or destabilize the system, effectively creating a denial‑of‑service condition. The weakness corresponds to a reference count or handle leakage identified in CWE-911.

The vulnerability affects all Linux kernel implementations that include the unpatched f_printer subsystem. No specific version constraints are listed in the CNA data, indicating that every kernel built with the default f_printer gadget before the commit that moves kref_get() into the success path is potentially exposed.

The EPSS score is less than 1% and the vulnerability is not listed in CISA KEV, suggesting a low overall exploitation probability. The likely attack vector is local, as an attacker needs to repeatedly open the /dev/usb-ff-printer node after it has been successfully opened once. Each failed open dissipates an unreleased reference, slowly draining kernel resources. Exploitation requires sustained interaction or a scenario where the target system is saturated with open attempts, which can be mitigated by limiting device access or disabling the gadget altogether.