U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2024-58002 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to the file handle that started the operation. That pointer will be used when the device is done. Which could be anytime in the future. If the user closes that file descriptor, its structure will be freed, and there will be one dangling pointer per pending async control, that the driver will try to use. Clean all the dangling pointers during release(). To avoid adding a performance penalty in the most common case (no async operation), a counter has been introduced with some logic to make sure that it is properly handled.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50 kernel.org
https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb kernel.org Patch 
https://git.kernel.org/stable/c/2a29413ace64627e178fd422dd8a5d95219a2c0b kernel.org
https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac kernel.org Patch 
https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971 kernel.org Patch 
https://git.kernel.org/stable/c/653993f46861f2971e95e9a0e36a34b49dec542c kernel.org
https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c kernel.org Patch 
https://git.kernel.org/stable/c/ac18d781466252cd35a3e311e0a4b264260fd927 kernel.org
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html CVE
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html CVE

Weakness Enumeration

CWE-ID CWE Name Source
CWE-416 Use After Free cwe source acceptance level NIST  

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

6 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2024-58002
NVD Published Date:
02/26/2025
NVD Last Modified:
11/03/2025
Source:
kernel.org