CVE-2024-26747

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26747
In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usb_role_switch parent's module reference after the user get usb_role_switch device and put the reference after the user put the usb_role_switch device. However, the parent device of usb_role_switch may be removed before the user put the usb_role_switch. If so, then, NULL pointer issue will be met when the user put the parent module's reference. This will save the module pointer in structure of usb_role_switch. Then, we don't need to find module by iterating long relations.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa Patch
https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db Patch
https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e Patch
https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 Patch
https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 Patch
https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 Patch
https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa Patch
https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db Patch
https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e Patch
https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 Patch
https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 Patch
https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 Patch
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
History

04 Apr 2025, 14:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa - () https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa - Patch
References () https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db - () https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db - Patch
References () https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e - () https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e - Patch
References () https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 - () https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 - Patch
References () https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 - () https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 - Patch
References () https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 - () https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 - Patch
References () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html - Mailing List
First Time Debian debian Linux
Linux linux Kernel
Debian
Linux
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*

21 Nov 2024, 09:02

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
References () https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa - () https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa -
References () https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db - () https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db -
References () https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e - () https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e -
References () https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 - () https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 -
References () https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 - () https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1 -
References () https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 - () https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 -

05 Nov 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4
CWE CWE-476

05 Nov 2024, 10:15

Type Values Removed Values Added
References
  • {'url': 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html', 'source': '416baaa9-dc9f-4396-8d5f-8c081fb06d67'}

25 Jun 2024, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: roles: soluciona el problema del puntero NULL al colocar la referencia del módulo. En el diseño actual, el controlador de clase de rol usb obtendrá la referencia del módulo principal usb_role_switch después de que el usuario obtenga el dispositivo usb_role_switch y coloque la referencia después del El usuario puso el dispositivo usb_role_switch. Sin embargo, el dispositivo principal de usb_role_switch se puede eliminar antes de que el usuario coloque usb_role_switch. Si es así, entonces, el problema del puntero NULL se solucionará cuando el usuario coloque la referencia del módulo principal. Esto guardará el puntero del módulo en la estructura de usb_role_switch. Entonces, no necesitamos encontrar el módulo iterando relaciones largas.

03 Apr 2024, 17:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-03 17:15

Updated : 2025-04-04 14:32

NVD link : CVE-2024-26747

Mitre link : CVE-2024-26747

CVE.ORG link : CVE-2024-26747

JSON object : View

Products Affected

debian

  • debian_linux

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference