CVE-2024-26997

usb: dwc2: host: Fix dereference issue in DDMA completion flow.

State: Published
Severity: Not scored
Published: May 1, 2024
Updated: May 23, 2026
Reserved: Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: dwc2: host: Fix dereference issue in DDMA completion flow.

Fixed variable dereference issue in DDMA completion flow.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	dca1dc1e99e09e7b8eaccb55d6aecb87d9cb8ecd to before 257d313e37d66c3bcc87197fb5b8549129c45dfeAffected 693bbbccd9c774adacaf03ae9fcbb33b66b1ffc4 to before 75bf5e78b2a27cb1bca6fa826e3ab685015165e1Affected db4fa0c8e811676a7bfe8363a01e70ee601e75f7 to before 26fde0ea40dda1b08fad3bc0a43f122f6dd8bddfAffected 32d3f2f108ebcaf9bd9fc06095c776cb73add034 to before 8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8cAffected bc48eb1b53ce977d17d51caa574bd81064a117a2 to before 9de10b59d16880a0a3ae2876c142fe54ce45d816Affected 8d310e5d702c903a7ac95fb5dd248f046b39db00 to before 8a139fa44870e84ac228b7b76423a49610e5ba9aAffected 8b7c57ab6f6bc6bfee87e929cab6e6dac351606b to before 55656b2afd5f1efcec4245f3e7e814c2a9ef53f6Affected b258e42688501cadb1a6dd658d6f015df9f32d8f to before eed04fa96c48790c1cce73c8a248e9d460b088f8Affected c4046e703e0083c8d2031cce02f2479e9ba2c166Affected 6.7.12 to before 6.8Affected
LinuxLinux	4.19.312 to before 4.19.313Affected 5.4.274 to before 5.4.275Affected 5.10.215 to before 5.10.216Affected 5.15.154 to before 5.15.157Affected 6.1.84 to before 6.1.88Affected 6.6.24 to before 6.6.29Affected 6.8.3 to before 6.8.8Affected

Product

Versions

LinuxLinux

dca1dc1e99e09e7b8eaccb55d6aecb87d9cb8ecd to before 257d313e37d66c3bcc87197fb5b8549129c45dfeAffected
693bbbccd9c774adacaf03ae9fcbb33b66b1ffc4 to before 75bf5e78b2a27cb1bca6fa826e3ab685015165e1Affected
db4fa0c8e811676a7bfe8363a01e70ee601e75f7 to before 26fde0ea40dda1b08fad3bc0a43f122f6dd8bddfAffected
32d3f2f108ebcaf9bd9fc06095c776cb73add034 to before 8aa5c28ac65cb5e7f1b9c0c3238c00b661dd2b8cAffected
bc48eb1b53ce977d17d51caa574bd81064a117a2 to before 9de10b59d16880a0a3ae2876c142fe54ce45d816Affected
8d310e5d702c903a7ac95fb5dd248f046b39db00 to before 8a139fa44870e84ac228b7b76423a49610e5ba9aAffected
8b7c57ab6f6bc6bfee87e929cab6e6dac351606b to before 55656b2afd5f1efcec4245f3e7e814c2a9ef53f6Affected
b258e42688501cadb1a6dd658d6f015df9f32d8f to before eed04fa96c48790c1cce73c8a248e9d460b088f8Affected
c4046e703e0083c8d2031cce02f2479e9ba2c166Affected
6.7.12 to before 6.8Affected

LinuxLinux

4.19.312 to before 4.19.313Affected
5.4.274 to before 5.4.275Affected
5.10.215 to before 5.10.216Affected
5.15.154 to before 5.15.157Affected
6.1.84 to before 6.1.88Affected
6.6.24 to before 6.6.29Affected
6.8.3 to before 6.8.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.