{"id":"CVE-2024-26997","state":"PUBLISHED","title":"usb: dwc2: host: Fix dereference issue in DDMA completion flow.","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: host: Fix dereference issue in DDMA completion flow.\n\nFixed variable dereference issue in DDMA completion flow.","publishedAt":"2024-05-01T05:28:21.226Z","updatedAt":"2026-05-23T15:40:58.757Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"dca1dc1e99e09e7b8eaccb55d6aecb87d9cb8ecd","status":"affected","lessThan":"257d313e37d66c3bcc87197fb5b8549129c45dfe","versionType":"git"},{"version":"693bbbccd9c774adacaf03ae9fcbb33b66b1ffc4","status":"affected","lessThan":"75bf5e78b2a27cb1bca6fa826e3ab685015165e1","versionType":"git"},{"version":"db4fa0c8e811676a7bfe8363a01e70ee601e75f7","status":"affected","lessThan":"26fde0ea40dda1b08fad3bc0a43f122f6dd8bddf","versionType":"git"},{"version":"32d3f2f108ebcaf9bd9fc06095c776cb73add034","status":"affected","lessThan":"8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8c","versionType":"git"},{"version":"bc48eb1b53ce977d17d51caa574bd81064a117a2","status":"affected","lessThan":"9de10b59d16880a0a3ae2876c142fe54ce45d816","versionType":"git"},{"version":"8d310e5d702c903a7ac95fb5dd248f046b39db00","status":"affected","lessThan":"8a139fa44870e84ac228b7b76423a49610e5ba9a","versionType":"git"},{"version":"8b7c57ab6f6bc6bfee87e929cab6e6dac351606b","status":"affected","lessThan":"55656b2afd5f1efcec4245f3e7e814c2a9ef53f6","versionType":"git"},{"version":"b258e42688501cadb1a6dd658d6f015df9f32d8f","status":"affected","lessThan":"eed04fa96c48790c1cce73c8a248e9d460b088f8","versionType":"git"},{"version":"c4046e703e0083c8d2031cce02f2479e9ba2c166","status":"affected","versionType":"git"},{"version":"6.7.12","status":"affected","lessThan":"6.8","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/usb/dwc2/hcd_ddma.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4.19.312","status":"affected","lessThan":"4.19.313","versionType":"semver"},{"version":"5.4.274","status":"affected","lessThan":"5.4.275","versionType":"semver"},{"version":"5.10.215","status":"affected","lessThan":"5.10.216","versionType":"semver"},{"version":"5.15.154","status":"affected","lessThan":"5.15.157","versionType":"semver"},{"version":"6.1.84","status":"affected","lessThan":"6.1.88","versionType":"semver"},{"version":"6.6.24","status":"affected","lessThan":"6.6.29","versionType":"semver"},{"version":"6.8.3","status":"affected","lessThan":"6.8.8","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/usb/dwc2/hcd_ddma.c"]}],"references":["https://git.kernel.org/stable/c/257d313e37d66c3bcc87197fb5b8549129c45dfe","https://git.kernel.org/stable/c/75bf5e78b2a27cb1bca6fa826e3ab685015165e1","https://git.kernel.org/stable/c/26fde0ea40dda1b08fad3bc0a43f122f6dd8bddf","https://git.kernel.org/stable/c/8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8c","https://git.kernel.org/stable/c/9de10b59d16880a0a3ae2876c142fe54ce45d816","https://git.kernel.org/stable/c/8a139fa44870e84ac228b7b76423a49610e5ba9a","https://git.kernel.org/stable/c/55656b2afd5f1efcec4245f3e7e814c2a9ef53f6","https://git.kernel.org/stable/c/eed04fa96c48790c1cce73c8a248e9d460b088f8","https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:07:10.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/26xxx/CVE-2024-26997.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-26997","state":"PUBLISHED","datePublished":"2024-05-01T05:28:21.226Z","dateUpdated":"2026-05-23T15:40:58.757Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-02-19T14:20:24.206Z"},"containers":{"cna":{"title":"usb: dwc2: host: Fix dereference issue in DDMA completion flow.","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc2: host: Fix dereference issue in DDMA completion flow.\n\nFixed variable dereference issue in DDMA completion flow."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"dca1dc1e99e09e7b8eaccb55d6aecb87d9cb8ecd","status":"affected","lessThan":"257d313e37d66c3bcc87197fb5b8549129c45dfe","versionType":"git"},{"version":"693bbbccd9c774adacaf03ae9fcbb33b66b1ffc4","status":"affected","lessThan":"75bf5e78b2a27cb1bca6fa826e3ab685015165e1","versionType":"git"},{"version":"db4fa0c8e811676a7bfe8363a01e70ee601e75f7","status":"affected","lessThan":"26fde0ea40dda1b08fad3bc0a43f122f6dd8bddf","versionType":"git"},{"version":"32d3f2f108ebcaf9bd9fc06095c776cb73add034","status":"affected","lessThan":"8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8c","versionType":"git"},{"version":"bc48eb1b53ce977d17d51caa574bd81064a117a2","status":"affected","lessThan":"9de10b59d16880a0a3ae2876c142fe54ce45d816","versionType":"git"},{"version":"8d310e5d702c903a7ac95fb5dd248f046b39db00","status":"affected","lessThan":"8a139fa44870e84ac228b7b76423a49610e5ba9a","versionType":"git"},{"version":"8b7c57ab6f6bc6bfee87e929cab6e6dac351606b","status":"affected","lessThan":"55656b2afd5f1efcec4245f3e7e814c2a9ef53f6","versionType":"git"},{"version":"b258e42688501cadb1a6dd658d6f015df9f32d8f","status":"affected","lessThan":"eed04fa96c48790c1cce73c8a248e9d460b088f8","versionType":"git"},{"version":"c4046e703e0083c8d2031cce02f2479e9ba2c166","status":"affected","versionType":"git"},{"version":"6.7.12","status":"affected","lessThan":"6.8","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/usb/dwc2/hcd_ddma.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"4.19.312","status":"affected","lessThan":"4.19.313","versionType":"semver"},{"version":"5.4.274","status":"affected","lessThan":"5.4.275","versionType":"semver"},{"version":"5.10.215","status":"affected","lessThan":"5.10.216","versionType":"semver"},{"version":"5.15.154","status":"affected","lessThan":"5.15.157","versionType":"semver"},{"version":"6.1.84","status":"affected","lessThan":"6.1.88","versionType":"semver"},{"version":"6.6.24","status":"affected","lessThan":"6.6.29","versionType":"semver"},{"version":"6.8.3","status":"affected","lessThan":"6.8.8","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/usb/dwc2/hcd_ddma.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/257d313e37d66c3bcc87197fb5b8549129c45dfe"},{"url":"https://git.kernel.org/stable/c/75bf5e78b2a27cb1bca6fa826e3ab685015165e1"},{"url":"https://git.kernel.org/stable/c/26fde0ea40dda1b08fad3bc0a43f122f6dd8bddf"},{"url":"https://git.kernel.org/stable/c/8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8c"},{"url":"https://git.kernel.org/stable/c/9de10b59d16880a0a3ae2876c142fe54ce45d816"},{"url":"https://git.kernel.org/stable/c/8a139fa44870e84ac228b7b76423a49610e5ba9a"},{"url":"https://git.kernel.org/stable/c/55656b2afd5f1efcec4245f3e7e814c2a9ef53f6"},{"url":"https://git.kernel.org/stable/c/eed04fa96c48790c1cce73c8a248e9d460b088f8"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-23T15:40:58.757Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19.312","versionEndExcluding":"4.19.313"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.4.274","versionEndExcluding":"5.4.275"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.215","versionEndExcluding":"5.10.216"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.154","versionEndExcluding":"5.15.157"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.84","versionEndExcluding":"6.1.88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.24","versionEndExcluding":"6.6.29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.8.3","versionEndExcluding":"6.8.8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.7.12"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-17T17:40:39.519356Z","id":"CVE-2024-26997","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-17T17:46:29.335Z"}},{"title":"CVE Program Container","references":[{"url":"https://git.kernel.org/stable/c/257d313e37d66c3bcc87197fb5b8549129c45dfe","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/75bf5e78b2a27cb1bca6fa826e3ab685015165e1","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/26fde0ea40dda1b08fad3bc0a43f122f6dd8bddf","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8c","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/9de10b59d16880a0a3ae2876c142fe54ce45d816","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/8a139fa44870e84ac228b7b76423a49610e5ba9a","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/55656b2afd5f1efcec4245f3e7e814c2a9ef53f6","tags":["x_transferred"]},{"url":"https://git.kernel.org/stable/c/eed04fa96c48790c1cce73c8a248e9d460b088f8","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html","tags":["x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T00:21:05.901Z"}}]}}}