CVE-2024-36896

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36896
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value. It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems. The same bug exists in the disable_show() routine, and it can be fixed the same way.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 Patch
https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 Patch
https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 Patch
https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce Patch
https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 Patch
https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 Patch
https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 Patch
https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
History

01 Apr 2025, 18:35

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 - () https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 - Patch
References () https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 - () https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 - Patch
References () https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 - () https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 - Patch
References () https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce - () https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.9:rc2:*:*:*:*:*:*
First Time Linux
Linux linux Kernel

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 - () https://git.kernel.org/stable/c/5f1d68ef5ddac27c6b997adccd1c339cef1e6848 -
References () https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 - () https://git.kernel.org/stable/c/6119ef6517ce501fc548154691abdaf1f954a277 -
References () https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 - () https://git.kernel.org/stable/c/63533549ff53d24daf47c443dbd43c308afc3434 -
References () https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce - () https://git.kernel.org/stable/c/a4b46d450c49f32e9d4247b421e58083fde304ce -

03 Jul 2024, 02:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: USB: core: corrige la infracción de acceso durante la eliminación del dispositivo del puerto. Las pruebas con KASAN y syzkaller revelaron un error en port.c:disable_store(): usb_hub_to_struct_hub() puede devolver NULL si el hub que el puerto al que pertenece se elimina simultáneamente, pero la función no comprueba esta posibilidad antes de desreferenciar el valor devuelto. Resulta que la primera desreferencia es innecesaria, ya que hub->intfdev es el padre del dispositivo portuario, por lo que se puede cambiar fácilmente. Agregar una verificación para hub == NULL evita más problemas. El mismo error existe en la rutina enable_show() y se puede solucionar de la misma manera.
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

30 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-30 16:15

Updated : 2025-04-01 18:35

NVD link : CVE-2024-36896

Mitre link : CVE-2024-36896

CVE.ORG link : CVE-2024-36896

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference