In the Linux kernel, the following vulnerability has been resolved:
usb: musb: sunxi: Fix accessing an released usb phy
Commit 6ed05c68cbca ("usb: musb: sunxi: Explicitly release USB PHY on exit") will cause that usb phy @glue->xceiv is accessed after released.
1) register platform driver @sunximusbdriver // get the usb phy @glue->xceiv sunximusbprobe() -> devmusbget_phy().
2) register and unregister platform driver @musbdriver musbprobe() -> sunximusbinit() use the phy here //the phy is released here musbremove() -> sunximusbexit() -> devmusbputphy()
3) register @musbdriver again musbprobe() -> sunximusbinit() use the phy here but the phy has been released at 2). ...
Fixed by reverting the commit, namely, removing devmusbputphy() from sunximusb_exit().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50269.json"
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50269.json"
[
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd811c304d2ee56189bfbc49302cb3c44361893",
"id": "CVE-2024-50269-32d7d13c",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@498dbd9aea205db9da674994b74c7bf8e18448bd",
"id": "CVE-2024-50269-453df559",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b08baa75b989cf779cbfa0969681f8ba2dc46569",
"id": "CVE-2024-50269-6d831fa7",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e2848d1c8c0139161e69ac0a94133e90e9988e8",
"id": "CVE-2024-50269-77e1d86b",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4aa77d5ea9944468e16c3eed15e858fd5de44de1",
"id": "CVE-2024-50269-974bb1da",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63559ba8077cbadae1c92a65b73ea522bf377dd9",
"id": "CVE-2024-50269-9d4e8c23",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6e2848d1c8c0139161e69ac0a94133e90e9988e8",
"id": "CVE-2024-50269-b69acf00",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4aa77d5ea9944468e16c3eed15e858fd5de44de1",
"id": "CVE-2024-50269-c181ede2",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@498dbd9aea205db9da674994b74c7bf8e18448bd",
"id": "CVE-2024-50269-cc282ece",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ccd811c304d2ee56189bfbc49302cb3c44361893",
"id": "CVE-2024-50269-d3e7cb46",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@721ddad945596220c123eb6f7126729fe277ee4f",
"id": "CVE-2024-50269-e3f4021c",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"function_hash": "286629023183134210077385674386270732963",
"length": 546.0
},
"signature_type": "Function",
"target": {
"file": "drivers/usb/musb/sunxi.c",
"function": "sunxi_musb_exit"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@63559ba8077cbadae1c92a65b73ea522bf377dd9",
"id": "CVE-2024-50269-e550d7fe",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b08baa75b989cf779cbfa0969681f8ba2dc46569",
"id": "CVE-2024-50269-efb569cc",
"signature_version": "v1"
},
{
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"330453855720656203344074691600810870042",
"152732404375960719968072246482513453723",
"195244512783126952797194390995382170311",
"82780314943370328184676381544949730904"
]
},
"signature_type": "Line",
"target": {
"file": "drivers/usb/musb/sunxi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@721ddad945596220c123eb6f7126729fe277ee4f",
"id": "CVE-2024-50269-f5e2169f",
"signature_version": "v1"
}
]