CVE-2024-26747

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-26747
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26747.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26747
Downstream
Related
Published
2024-04-03T17:15:51Z
Modified
2025-08-09T19:01:28Z
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: roles: fix NULL pointer issue when put module's reference

In current design, usb role class driver will get usbroleswitch parent's module reference after the user get usbroleswitch device and put the reference after the user put the usbroleswitch device. However, the parent device of usbroleswitch may be removed before the user put the usbroleswitch. If so, then, NULL pointer issue will be met when the user put the parent module's reference.

This will save the module pointer in structure of usbroleswitch. Then, we don't need to find module by iterating long relations.

References

Affected packages