Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-50267

USB: serial: io_edgeport: fix use after free in debug printk

Description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in debug printk The "dev_dbg(&urb->dev->dev, ..." which happens after usb_free_urb(urb) is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 984f68683298ba53af32f909de1f9452fbb37ccb to < e6ceb04eeb6115d872d4c4078d12f1170ed755ceaffected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 39709ce93f5c3f9eb535efe2afea088805d1128faffected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < e567fc8f7a4460e486e52c9261b1e8b9f5dc42aaaffected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 44fff2c16c5aafbdb70c7183dae0a415ae74705eaffected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 275258c30bbda29467216e96fb655b16bcc9992baffected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 13d6ff3ca76056d06a9d88300be2a293442ff595affected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 314bdf446053e123f37543aa535197ee75f8aa97affected
  • 984f68683298ba53af32f909de1f9452fbb37ccb to < 37bb5628379295c1254c113a407cab03a0f4d0b4affected

Linux Linux

Default version status: affected

  • 3.7affected
  • 0 to < 3.7unaffected
  • 4.19.324 to ≤ 4.19.*unaffected
  • 5.4.286 to ≤ 5.4.*unaffected
  • 5.10.230 to ≤ 5.10.*unaffected
  • 5.15.172 to ≤ 5.15.*unaffected
  • 6.1.117 to ≤ 6.1.*unaffected
  • 6.6.61 to ≤ 6.6.*unaffected
  • 6.11.8 to ≤ 6.11.*unaffected
  • 6.12 to ≤ *unaffected

References