Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-44960

usb: gadget: core: Check for unset descriptor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d1c188d330ca33cc35d1590441ba276f31144299 to < ba15815dd24cc5ec0d23e2170dc58c7db1e03b4aaffected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < df8e734ae5e605348aa0ca2498aedb73e815f244affected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < 7cc9ebcfe58be22f18056ad8bc6272d120bdcb3eaffected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < 50c5248b0ea8aae0529fdf28dac42a41312d3b62affected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < a0362cd6e503278add954123957fd47990e8d9bfaffected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < 1a9df57d57452b104c46c918569143cf21d7ebf1affected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < 716cba46f73a92645cf13eded8d257ed48afc2a4affected
  • 54f83b8c8ea9b22082a496deadf90447a326954e to < 973a57891608a98e894db2887f278777f564de18affected
  • d7e3f2fe01372eb914d0e451f0e7a46cbcb98f9eaffected
  • 85c9ece11264499890d0e9f0dee431ac1bda981caffected
  • fc71e39a6c07440e6968227f3db1988f45d7a7b7affected
  • 94f5de2eefae22c449e367c2dacafe869af73e3faffected
  • 8212b44b7109bd30dbf7eb7f5ecbbc413757a7d7affected
  • 4.19.82 to < 4.19.320affected
  • 3.16.80 to < 3.17affected
  • 4.4.199 to < 4.5affected
  • 4.9.199 to < 4.10affected
  • 4.14.152 to < 4.15affected
  • 5.3.9 to < 5.4affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 4.19.320 to ≤ 4.19.*unaffected
  • 5.4.282 to ≤ 5.4.*unaffected
  • 5.10.224 to ≤ 5.10.*unaffected
  • 5.15.165 to ≤ 5.15.*unaffected
  • 6.1.105 to ≤ 6.1.*unaffected
  • 6.6.46 to ≤ 6.6.*unaffected
  • 6.10.5 to ≤ 6.10.*unaffected
  • 6.11 to ≤ *unaffected

References