← Back

CVE-2024-44960

nvd nist
Published: Sep 4, 2024Modified: Oct 15, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.

Affected (14)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Linux
version < 3.16.80
3.17 ≤ version < 4.4.199
4.10 ≤ version < 4.14.152
4.15 ≤ version < 4.19.320
4.20 ≤ version < 5.3.9
4.5 ≤ version < 4.9.199
5.11 ≤ version < 5.15.165
5.16 ≤ version < 6.1.105
5.4 ≤ version < 5.4.282
5.5 ≤ version < 5.10.224
6.2 ≤ version < 6.6.46
6.7 ≤ version < 6.10.5
Version 6.11 rc1
Version 6.11 rc2

References (13)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.