In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: st: fix probed platform device ref count on probe error path
The probe function never performs any paltform device allocation, thus error path "undoplatformdev_alloc" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3498650df0805c75b4e1c94d07423c46cbf4ce1",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-0c8aaea9",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"130895448832344359472084349122759908050"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6aee4c5635d81f4809c3b9f0c198a65adfbb2ada",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-1dd58c3a",
"signature_type": "Function",
"digest": {
"length": 2189.0,
"function_hash": "256033218891773181928433798739608583277"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c6735299540f3c82a5033d35be76a5c42e0fb18",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-3332ea42",
"signature_type": "Function",
"digest": {
"length": 2194.0,
"function_hash": "240169904091641660906676811534850561529"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1de989668708ce5875efc9d669d227212aeb9a90",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-379f7811",
"signature_type": "Function",
"digest": {
"length": 2194.0,
"function_hash": "240169904091641660906676811534850561529"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f3498650df0805c75b4e1c94d07423c46cbf4ce1",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-49ef721f",
"signature_type": "Function",
"digest": {
"length": 2237.0,
"function_hash": "166358455329091549141620721332835318794"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6aee4c5635d81f4809c3b9f0c198a65adfbb2ada",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-78c13a7e",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"130895448832344359472084349122759908050"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0979a885b9d4df2a25b88e9d444ccaa5f9f495c",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-b62aecff",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"130895448832344359472084349122759908050"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddfcfeba891064b88bb844208b43bef2ef970f0c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-b9e42fc8",
"signature_type": "Function",
"digest": {
"length": 2194.0,
"function_hash": "240169904091641660906676811534850561529"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1de989668708ce5875efc9d669d227212aeb9a90",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-bf69a696",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"314540819641926437484589585556584162097"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ddfcfeba891064b88bb844208b43bef2ef970f0c",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-c10ef51b",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"314540819641926437484589585556584162097"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4c6735299540f3c82a5033d35be76a5c42e0fb18",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-c5845aab",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"130895448832344359472084349122759908050"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b0979a885b9d4df2a25b88e9d444ccaa5f9f495c",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-d9cc7d24",
"signature_type": "Function",
"digest": {
"length": 2171.0,
"function_hash": "145356889000161684870690481847732995122"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49",
"signature_version": "v1",
"deprecated": false,
"target": {
"function": "st_dwc3_probe",
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-eb89355c",
"signature_type": "Function",
"digest": {
"length": 2194.0,
"function_hash": "240169904091641660906676811534850561529"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e1e5e8ea2731150d5ba7c707f9e02fafebcfeb49",
"signature_version": "v1",
"deprecated": false,
"target": {
"file": "drivers/usb/dwc3/dwc3-st.c"
},
"id": "CVE-2024-46674-f4a4d006",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"261665871390429259336598992640899750668",
"100624550352252722256155956407384321519",
"266431257920307560571446060092609842086",
"334891159760760119596058904097391176199",
"165619822672348328775925359881832709906",
"307582172668184488580695539321435469439",
"159761318673434915121160935379320200053",
"207452203692052398354772569080561178439",
"19845703953799158076392735071407725516",
"26902925410308278225071461296540023405",
"79380655898750052799509237806227951330",
"134965083302422598661428951162545272786",
"294444256989536860865188245865465948595",
"268865309339083103853767421295630653648",
"58719271404170642043163148220340801519",
"97961208727622041800433966491510919240",
"314540819641926437484589585556584162097"
]
}
}
]