Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-38628

usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. Hang on to the control IDs instead of pointers since those are correctly handled with locks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 02de698ca8123782c0c6fb8ed99080e2f032b0d2 to < 89e66809684485590ea0b32c3178e42cba36ac09affected
  • 02de698ca8123782c0c6fb8ed99080e2f032b0d2 to < 453d3fa9266e53f85377b911c19b9a4563fa88c0affected
  • 02de698ca8123782c0c6fb8ed99080e2f032b0d2 to < bea73b58ab67fe581037ad9cdb93c2557590c068affected
  • 02de698ca8123782c0c6fb8ed99080e2f032b0d2 to < 1b739388aa3f8dfb63a9fca777e6dfa6912d0464affected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.9.4 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References