U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2024-26747 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: usb: roles: fix NULL pointer issue when put module's reference In current design, usb role class driver will get usb_role_switch parent's module reference after the user get usb_role_switch device and put the reference after the user put the usb_role_switch device. However, the parent device of usb_role_switch may be removed before the user put the usb_role_switch. If so, then, NULL pointer issue will be met when the user put the parent module's reference. This will save the module pointer in structure of usb_role_switch. Then, we don't need to find module by iterating long relations.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink Resource
https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa
https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa
https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db
https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db
https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e
https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e
https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734
https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734
https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913
https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913
https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

Weakness Enumeration

CWE-ID CWE Name Source
CWE-476 NULL Pointer Dereference CISA-ADP  

Change History

7 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2024-26747
NVD Published Date:
04/03/2024
NVD Last Modified:
11/21/2024
Source:
kernel.org