CVE-2024-58059

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix deadlock during uvc_probe If uvc_probe() fails, it can end up calling uvc_status_unregister() before uvc_status_init() is called. Fix this by checking if dev->status is NULL or not in uvc_status_unregister().
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

25 Mar 2025, 14:35

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux
Linux linux Kernel
CWE CWE-667
References () https://git.kernel.org/stable/c/a67f75c2b5ecf534eab416ce16c11fe780c4f8f6 - () https://git.kernel.org/stable/c/a67f75c2b5ecf534eab416ce16c11fe780c4f8f6 - Patch
References () https://git.kernel.org/stable/c/db577ededf3a18b39567fc1a6209f12a0c4a3c52 - () https://git.kernel.org/stable/c/db577ededf3a18b39567fc1a6209f12a0c4a3c52 - Patch
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: media: uvcvideo: Se solucionó el bloqueo durante uvc_probe Si uvc_probe() falla, puede terminar llamando a uvc_status_unregister() antes de que se llame a uvc_status_init(). Solucione esto verificando si dev->status es NULL o no en uvc_status_unregister().

06 Mar 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-06 16:15

Updated : 2025-03-25 14:35


NVD link : CVE-2024-58059

Mitre link : CVE-2024-58059

CVE.ORG link : CVE-2024-58059


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking