Riskcovery

CVE-2024-45027

usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()

State
Published
Severity
Not scored
Published
Sep 11, 2024
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()

If xhci_mem_init() fails, it calls into xhci_mem_cleanup() to mop up the damage. If it fails early enough, before xhci->interrupters is allocated but after xhci->max_interrupters has been set, which happens in most (all?) cases, things get uglier, as xhci_mem_cleanup() unconditionally derefences xhci->interrupters. With prejudice.

Gate the interrupt freeing loop with a check on xhci->interrupters being non-NULL.

Found while debugging a DMA allocation issue that led the XHCI driver on this exact path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bcd191d7bab25513daf7db78ab32eda60d9484c3 to before 3efb29f6a78d4746f958c1ab6cd7981c5762f03bAffected
  • c99b38c412343053e9af187e595793c8805bb9b8 to before 770cacc75b0091ece17349195d72133912c1ca7cAffected
  • c99b38c412343053e9af187e595793c8805bb9b8 to before dcdb52d948f3a17ccd3fce757d9bd981d7c32039Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.10.7 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.