Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2024-26747

usb: roles: fix NULL pointer issue when put module's reference

Description

In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usb_role_switch parent's module reference after the user get usb_role_switch device and put the reference after the user put the usb_role_switch device. However, the parent device of usb_role_switch may be removed before the user put the usb_role_switch. If so, then, NULL pointer issue will be met when the user put the parent module's reference. This will save the module pointer in structure of usb_role_switch. Then, we don't need to find module by iterating long relations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < e279bf8e51893e1fe160b3d8126ef2dd00f661e1affected
  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < ef982fc41055fcebb361a92288d3225783d12913affected
  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < 0158216805ca7e498d07de38840d2732166ae5faaffected
  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < 4b45829440b1b208948b39cc71f77a37a2536734affected
  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < 01f82de440f2ab07c259b7573371e1c42e5565dbaffected
  • 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b to < 1c9be13846c0b2abc2480602f8ef421360e1ad9eaffected
  • 7b169e33a3bc9040e06988b2bc15e83d2af80358affected
  • 4.18.12 to < 4.19affected

Linux Linux

Default version status: affected

  • 4.19affected
  • 0 to < 4.19unaffected
  • 5.10.211 to ≤ 5.10.*unaffected
  • 5.15.150 to ≤ 5.15.*unaffected
  • 6.1.80 to ≤ 6.1.*unaffected
  • 6.6.19 to ≤ 6.6.*unaffected
  • 6.7.7 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References