Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usb_role_switch parent's module reference after the user get usb_role_switch device and put the reference after the user put the usb_role_switch device. However, the parent device of usb_role_switch may be removed before the user put the usb_role_switch. If so, then, NULL pointer issue will be met when the user put the parent module's reference. This will save the module pointer in structure of usb_role_switch. Then, we don't need to find module by iterating long relations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before e279bf8e51893e1fe160b3d8126ef2dd00f661e1; affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before ef982fc41055fcebb361a92288d3225783d12913; affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before 0158216805ca7e498d07de38840d2732166ae5fa; affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before 4b45829440b1b208948b39cc71f77a37a2536734; affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before 01f82de440f2ab07c259b7573371e1c42e5565db; affected 5c54fcac9a9de559b444ac63ec3cd82f1d157a0b before 1c9be13846c0b2abc2480602f8ef421360e1ad9e; affected 7b169e33a3bc9040e06988b2bc15e83d2af80358; affected 4.18.12 before 4.19 |
| Linux / Linux | affected 4.19; unaffected 0 before 4.19; unaffected 5.10.211 through 5.10.*; unaffected 5.15.150 through 5.15.*; unaffected 6.1.80 through 6.1.*; unaffected 6.6.19 through 6.6.*; unaffected 6.7.7 through 6.7.*; unaffected 6.8 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
- https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913
- https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa
- https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734
- https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db
- https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.
- https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
- https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913
- https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa
- https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734
- https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db
- https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e
- https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html