In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_acm: Refactor bind path to use __free() After an bind/unbind cycle, the acm->notify_req is left stale. If a subseq…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_acm: Refactor bind path to use __free() After an bind/unbind cycle, the acm->notify_req is left stale. If a subsequent bind fails, the unified error label attempts to free this stale request, leading to a NULL pointer dereference when accessing ep->ops->free_request. Refactor the error handling in the bind path to use the __free() automatic cleanup mechanism. Unable to handle kernel NULL pointer dereference a…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/201a66d8e6630762e760e1d78f1d149da1691e7b
- https://git.kernel.org/stable/c/2b1546f7c5fc6c44555a8e7a2b34229d1dcd2175
- https://git.kernel.org/stable/c/47b2116e54b4a854600341487e8b55249e926324
- https://git.kernel.org/stable/c/c4301e4dd6b32faccb744f1c2320e64235b68d3b
- https://git.kernel.org/stable/c/c5d116862dd3ed162d079738a5ebddf9fceea850
- https://git.kernel.org/stable/c/e348d18fb0124b662cfefb3001733b49da428215
Timeline
- nvd_ingest NVD