Riskcovery

CVE-2024-26919

usb: ulpi: Fix debugfs directory leak

State
Published
Severity
7.8 High
Published
Apr 17, 2024
Updated
Aug 5, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: ulpi: Fix debugfs directory leak

The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after the ulpi device itself. This results in the directory sticking around and preventing subsequent (deferred) probes from succeeding. Change the directory name to match the ulpi device.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bd0a0a024f2a41e7cc8eadb9862f82c45884b69c to before d31b886ed6a5095214062ee4fb55037eb930adb6Affected
  • bd0a0a024f2a41e7cc8eadb9862f82c45884b69c to before 330d22aba17a4d30a56f007d0f51291d7e00862bAffected
  • bd0a0a024f2a41e7cc8eadb9862f82c45884b69c to before 33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3Affected
  • bd0a0a024f2a41e7cc8eadb9862f82c45884b69c to before 3caf2b2ad7334ef35f55b95f3e1b138c6f77b368Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.79 through 6.1.*Not affected
  • 6.6.18 through 6.6.*Not affected
  • 6.7.6 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.