Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-58055

usb: gadget: f_tcm: Don't free command immediately

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Don't free command immediately Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < 7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694affected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < 38229c35a6d7875697dfb293356407330cfcd23eaffected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < bbb7f49839b57d66ccaf7b5752d9b63d3031dd0aaffected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < f0c33e7d387ccbb6870e73a43c558fefede06614affected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < 16907219ad6763f401700e1b57b2da4f3e07f047affected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < 929b69810eec132b284ffd19047a85d961df9e4daffected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < e6693595bd1b55af62d057a4136a89d5c2ddf0e9affected
  • cff834c16d23d614388aab1b86d19eb67b3f80c4 to < c225d006a31949d673e646d585d9569bc28feeb9affected

Linux Linux

Default version status: affected

  • 4.6affected
  • 0 to < 4.6unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.76 to ≤ 6.6.*unaffected
  • 6.12.13 to ≤ 6.12.*unaffected
  • 6.13.2 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References