CVEvulnerability

CVE-2024-44960

5.5 MEDIUM Published 2024-09-04 Modified 2026-10-15 Official page ↗
Status
Modified
Published
2024-09-04
Last modified
2026-10-15
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.

Affected configurations

• linux linux kernel (< 3.16.80) • linux linux kernel (>= 3.17 < 4.4.199) • linux linux kernel (>= 4.5 < 4.9.199) • linux linux kernel (>= 4.10 < 4.14.152) • linux linux kernel (>= 4.15 < 4.19.320) • linux linux kernel (>= 4.20 < 5.3.9) • linux linux kernel (>= 5.4 < 5.4.282) • linux linux kernel (>= 5.5 < 5.10.224) • linux linux kernel (>= 5.11 < 5.15.165) • linux linux kernel (>= 5.16 < 6.1.105) • linux linux kernel (>= 6.2 < 6.6.46) • linux linux kernel (>= 6.7 < 6.10.5) • linux linux kernel 6.11

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References