CVE-2024-26933

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-26933
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-26933.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-26933
Downstream
Related
Published
2024-05-01T05:17:23Z
Modified
2025-10-15T09:30:08.590511Z
Summary
USB: core: Fix deadlock in port "disable" sysfs attribute
Details

In the Linux kernel, the following vulnerability has been resolved:

USB: core: Fix deadlock in port "disable" sysfs attribute

The show and store callback routines for the "disable" sysfs attribute file in port.c acquire the device lock for the port's parent hub device. This can cause problems if another process has locked the hub to remove it or change its configuration:

Removing the hub or changing its configuration requires the
hub interface to be removed, which requires the port device
to be removed, and device_del() waits until all outstanding
sysfs attribute callbacks for the ports have returned.  The
lock can't be released until then.

But the disable_show() or disable_store() routine can't return
until after it has acquired the lock.

The resulting deadlock can be avoided by calling sysfsbreakactiveprotection(). This will cause the sysfs core not to wait for the attribute's callback routine to return, allowing the removal to proceed. The disadvantage is that after making this call, there is no guarantee that the hub structure won't be deallocated at any moment. To prevent this, we have to acquire a reference to it first by calling hubget().

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f061f43d7418cb62b8d073e221ec75d3f5b89e17
Fixed
9dac54f08198147f5ec0ec52fcf1bc8ac899ac05
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f061f43d7418cb62b8d073e221ec75d3f5b89e17
Fixed
f51849833705dea5b4f9b0c8de714dd87bd6c95c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f061f43d7418cb62b8d073e221ec75d3f5b89e17
Fixed
4facc9421117ba9d8148c73771b213887fec77f7
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f061f43d7418cb62b8d073e221ec75d3f5b89e17
Fixed
73d1589b91f2099e5f6534a8497b7c6b527e064e
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f061f43d7418cb62b8d073e221ec75d3f5b89e17
Fixed
f4d1960764d8a70318b02f15203a1be2b2554ca1

Affected versions

v5.*

v5.19
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.11
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
v6.9-rc1

Database specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_show"
            },
            "deprecated": false,
            "digest": {
                "length": 661.0,
                "function_hash": "37636659622393138531694318488977617614"
            },
            "id": "CVE-2024-26933-04cc347f",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73d1589b91f2099e5f6534a8497b7c6b527e064e"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_show"
            },
            "deprecated": false,
            "digest": {
                "length": 661.0,
                "function_hash": "37636659622393138531694318488977617614"
            },
            "id": "CVE-2024-26933-0da00049",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9dac54f08198147f5ec0ec52fcf1bc8ac899ac05"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_show"
            },
            "deprecated": false,
            "digest": {
                "length": 661.0,
                "function_hash": "37636659622393138531694318488977617614"
            },
            "id": "CVE-2024-26933-1627642e",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4facc9421117ba9d8148c73771b213887fec77f7"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_store"
            },
            "deprecated": false,
            "digest": {
                "length": 860.0,
                "function_hash": "50033942325157559987423791923821243277"
            },
            "id": "CVE-2024-26933-31dda12d",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73d1589b91f2099e5f6534a8497b7c6b527e064e"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "drivers/usb/core/port.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "124124045036899436569161070295595321865",
                    "326887834523353942653519193964280325419",
                    "38586705395991690919735502820911824194",
                    "139407035192693395387539503100523854874",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "55762583053224496597156531192207606646",
                    "86370027341593792303759598439799789148",
                    "60327275114857330868864218525914874543",
                    "167328098052921327121952760193688001015",
                    "120182405466693735386686343083452268070",
                    "74699283725168474774306148980013394388",
                    "240926079715357974461884545839157582378",
                    "174798319353103657856904626483135351943",
                    "12100127611703284219116342607608385116",
                    "134930433727958339848591324817453396552",
                    "297554066257086817194536068822597395964",
                    "139363897085626931608232261585189689926",
                    "81078741684642585168402637371131384652",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "273715955907387436636965930678712306264",
                    "5436533513113353330963380175911228589",
                    "79703716833602937183347318039239600435",
                    "27163837526590080694860098822300783095",
                    "244732656672976450350753721248872890533",
                    "318816572062315508842336938147569101968"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-26933-32a8ca73",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73d1589b91f2099e5f6534a8497b7c6b527e064e"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_store"
            },
            "deprecated": false,
            "digest": {
                "length": 860.0,
                "function_hash": "50033942325157559987423791923821243277"
            },
            "id": "CVE-2024-26933-44903e4f",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9dac54f08198147f5ec0ec52fcf1bc8ac899ac05"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "drivers/usb/core/port.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "124124045036899436569161070295595321865",
                    "326887834523353942653519193964280325419",
                    "38586705395991690919735502820911824194",
                    "139407035192693395387539503100523854874",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "55762583053224496597156531192207606646",
                    "86370027341593792303759598439799789148",
                    "60327275114857330868864218525914874543",
                    "167328098052921327121952760193688001015",
                    "120182405466693735386686343083452268070",
                    "74699283725168474774306148980013394388",
                    "240926079715357974461884545839157582378",
                    "174798319353103657856904626483135351943",
                    "12100127611703284219116342607608385116",
                    "134930433727958339848591324817453396552",
                    "297554066257086817194536068822597395964",
                    "139363897085626931608232261585189689926",
                    "81078741684642585168402637371131384652",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "273715955907387436636965930678712306264",
                    "5436533513113353330963380175911228589",
                    "79703716833602937183347318039239600435",
                    "27163837526590080694860098822300783095",
                    "244732656672976450350753721248872890533",
                    "318816572062315508842336938147569101968"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-26933-6b6ebe73",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4d1960764d8a70318b02f15203a1be2b2554ca1"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_store"
            },
            "deprecated": false,
            "digest": {
                "length": 860.0,
                "function_hash": "50033942325157559987423791923821243277"
            },
            "id": "CVE-2024-26933-85ac0380",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f51849833705dea5b4f9b0c8de714dd87bd6c95c"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "drivers/usb/core/port.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "124124045036899436569161070295595321865",
                    "326887834523353942653519193964280325419",
                    "38586705395991690919735502820911824194",
                    "139407035192693395387539503100523854874",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "55762583053224496597156531192207606646",
                    "86370027341593792303759598439799789148",
                    "60327275114857330868864218525914874543",
                    "167328098052921327121952760193688001015",
                    "120182405466693735386686343083452268070",
                    "74699283725168474774306148980013394388",
                    "240926079715357974461884545839157582378",
                    "174798319353103657856904626483135351943",
                    "12100127611703284219116342607608385116",
                    "134930433727958339848591324817453396552",
                    "297554066257086817194536068822597395964",
                    "139363897085626931608232261585189689926",
                    "81078741684642585168402637371131384652",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "273715955907387436636965930678712306264",
                    "5436533513113353330963380175911228589",
                    "79703716833602937183347318039239600435",
                    "27163837526590080694860098822300783095",
                    "244732656672976450350753721248872890533",
                    "318816572062315508842336938147569101968"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-26933-95fa5f81",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4facc9421117ba9d8148c73771b213887fec77f7"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "drivers/usb/core/port.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "124124045036899436569161070295595321865",
                    "326887834523353942653519193964280325419",
                    "38586705395991690919735502820911824194",
                    "139407035192693395387539503100523854874",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "55762583053224496597156531192207606646",
                    "86370027341593792303759598439799789148",
                    "60327275114857330868864218525914874543",
                    "167328098052921327121952760193688001015",
                    "120182405466693735386686343083452268070",
                    "74699283725168474774306148980013394388",
                    "240926079715357974461884545839157582378",
                    "174798319353103657856904626483135351943",
                    "12100127611703284219116342607608385116",
                    "134930433727958339848591324817453396552",
                    "297554066257086817194536068822597395964",
                    "139363897085626931608232261585189689926",
                    "81078741684642585168402637371131384652",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "273715955907387436636965930678712306264",
                    "5436533513113353330963380175911228589",
                    "79703716833602937183347318039239600435",
                    "27163837526590080694860098822300783095",
                    "244732656672976450350753721248872890533",
                    "318816572062315508842336938147569101968"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-26933-a2b07ded",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f51849833705dea5b4f9b0c8de714dd87bd6c95c"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_show"
            },
            "deprecated": false,
            "digest": {
                "length": 661.0,
                "function_hash": "37636659622393138531694318488977617614"
            },
            "id": "CVE-2024-26933-a6d67dd9",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4d1960764d8a70318b02f15203a1be2b2554ca1"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_show"
            },
            "deprecated": false,
            "digest": {
                "length": 661.0,
                "function_hash": "37636659622393138531694318488977617614"
            },
            "id": "CVE-2024-26933-a74fbb7f",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f51849833705dea5b4f9b0c8de714dd87bd6c95c"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "drivers/usb/core/port.c"
            },
            "deprecated": false,
            "digest": {
                "line_hashes": [
                    "124124045036899436569161070295595321865",
                    "326887834523353942653519193964280325419",
                    "38586705395991690919735502820911824194",
                    "139407035192693395387539503100523854874",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "55762583053224496597156531192207606646",
                    "86370027341593792303759598439799789148",
                    "60327275114857330868864218525914874543",
                    "167328098052921327121952760193688001015",
                    "120182405466693735386686343083452268070",
                    "74699283725168474774306148980013394388",
                    "240926079715357974461884545839157582378",
                    "103054053711194591297063725984990359862",
                    "273801271446902368297959174611727074659",
                    "321986271576032606030593970552667753540",
                    "322731579964309974937543987847389460288",
                    "139363897085626931608232261585189689926",
                    "81078741684642585168402637371131384652",
                    "140356554113422913868213642176260313198",
                    "40509844877883886826106271776309033633",
                    "48586636410518339489213555006975358238",
                    "273715955907387436636965930678712306264",
                    "5436533513113353330963380175911228589",
                    "79703716833602937183347318039239600435",
                    "27163837526590080694860098822300783095",
                    "244732656672976450350753721248872890533",
                    "318816572062315508842336938147569101968"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-26933-a8991407",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9dac54f08198147f5ec0ec52fcf1bc8ac899ac05"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_store"
            },
            "deprecated": false,
            "digest": {
                "length": 860.0,
                "function_hash": "50033942325157559987423791923821243277"
            },
            "id": "CVE-2024-26933-c3ebbb60",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f4d1960764d8a70318b02f15203a1be2b2554ca1"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "drivers/usb/core/port.c",
                "function": "disable_store"
            },
            "deprecated": false,
            "digest": {
                "length": 860.0,
                "function_hash": "50033942325157559987423791923821243277"
            },
            "id": "CVE-2024-26933-dddef75b",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4facc9421117ba9d8148c73771b213887fec77f7"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.0.0
Fixed
6.1.84
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.24
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.12
Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.8.3