In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uvc: Fix ERRPTR dereference in uvcv4l2.c
Fix potential dereferencing of ERRPTR() in findformatbypix() and uvcv4l2enum_format().
Fix the following smatch errors:
drivers/usb/gadget/function/uvcv4l2.c:124 findformatbypix() error: 'fmtdesc' dereferencing possible ERR_PTR()
drivers/usb/gadget/function/uvcv4l2.c:392 uvcv4l2enumformat() error: 'fmtdesc' dereferencing possible ERR_PTR()
Also, fix similar issue in uvcv4l2tryformat() for potential dereferencing of ERRPTR().
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1605.0,
"function_hash": "202978503115348264765589383338119195086"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "uvc_v4l2_try_format"
},
"id": "CVE-2024-50056-177d3a9a"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 1605.0,
"function_hash": "202978503115348264765589383338119195086"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7bb96b18864225a694e3887ac2733159489e4b0",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "uvc_v4l2_try_format"
},
"id": "CVE-2024-50056-26e8e978"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 282.0,
"function_hash": "334318569329135328371529509805082996998"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7bb96b18864225a694e3887ac2733159489e4b0",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "find_format_by_pix"
},
"id": "CVE-2024-50056-65583997"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 282.0,
"function_hash": "334318569329135328371529509805082996998"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "find_format_by_pix"
},
"id": "CVE-2024-50056-6bea8484"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"266148113831712279397418697246046500794",
"147697246004318462474660611863542323004",
"91172223514776096175366800166132270779",
"57600941207158709214107698487397635444",
"316747961964079220694022335718651635944",
"3889071860402871054123205486051995183",
"165292160964265484937488335588177874022",
"308121111503709882200624691268816269586",
"24571711789468946464266378104901562073",
"14130907576460450565500093953293526300",
"106314021377222042493332118167042345685",
"316943683760401072774222456978301242450",
"200245948625507166921312767417266549536",
"255343678085282240481430950811899100571",
"217936948151757379569220554970024736662"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c"
},
"id": "CVE-2024-50056-6f87929d"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 394.0,
"function_hash": "338580752541902995159579349577196657342"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "uvc_v4l2_enum_format"
},
"id": "CVE-2024-50056-a31a0483"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"digest": {
"line_hashes": [
"266148113831712279397418697246046500794",
"147697246004318462474660611863542323004",
"91172223514776096175366800166132270779",
"57600941207158709214107698487397635444",
"316747961964079220694022335718651635944",
"3889071860402871054123205486051995183",
"165292160964265484937488335588177874022",
"308121111503709882200624691268816269586",
"24571711789468946464266378104901562073",
"14130907576460450565500093953293526300",
"106314021377222042493332118167042345685",
"316943683760401072774222456978301242450",
"200245948625507166921312767417266549536",
"255343678085282240481430950811899100571",
"217936948151757379569220554970024736662"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7bb96b18864225a694e3887ac2733159489e4b0",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c"
},
"id": "CVE-2024-50056-b6488c85"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"digest": {
"length": 394.0,
"function_hash": "338580752541902995159579349577196657342"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a7bb96b18864225a694e3887ac2733159489e4b0",
"target": {
"file": "drivers/usb/gadget/function/uvc_v4l2.c",
"function": "uvc_v4l2_enum_format"
},
"id": "CVE-2024-50056-ceb0b5c0"
}
]