CVE-2024-38628

Summary

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind.

Hang on to the control IDs instead of pointers since those are correctly handled with locks.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux02de698ca8123782c0c6fb8ed99080e2f032b0d2 < 89e66809684485590ea0b32c3178e42cba36ac09affected
LinuxLinux02de698ca8123782c0c6fb8ed99080e2f032b0d2 < 453d3fa9266e53f85377b911c19b9a4563fa88c0affected
LinuxLinux02de698ca8123782c0c6fb8ed99080e2f032b0d2 < bea73b58ab67fe581037ad9cdb93c2557590c068affected
LinuxLinux02de698ca8123782c0c6fb8ed99080e2f032b0d2 < 1b739388aa3f8dfb63a9fca777e6dfa6912d0464affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.1.93 <= 6.1.*unaffected
LinuxLinux6.6.33 <= 6.6.*unaffected
LinuxLinux6.9.4 <= 6.9.*unaffected
LinuxLinux6.10 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References