CVE-2024-50269

usb: musb: sunxi: Fix accessing an released usb phy

State: Published
Severity: 7.8 High
Published: Nov 19, 2024
Updated: May 23, 2026
Reserved: Oct 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: musb: sunxi: Fix accessing an released usb phy

Commit 6ed05c68cbca ("usb: musb: sunxi: Explicitly release USB PHY on exit") will cause that usb phy @glue->xceiv is accessed after released.

1) register platform driver @sunxi_musb_driver // get the usb phy @glue->xceiv sunxi_musb_probe() -> devm_usb_get_phy().

2) register and unregister platform driver @musb_driver musb_probe() -> sunxi_musb_init() use the phy here //the phy is released here musb_remove() -> sunxi_musb_exit() -> devm_usb_put_phy()

3) register @musb_driver again musb_probe() -> sunxi_musb_init() use the phy here but the phy has been released at 2). ...

Fixed by reverting the commit, namely, removing devm_usb_put_phy() from sunxi_musb_exit().

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 721ddad945596220c123eb6f7126729fe277ee4fAffected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 4aa77d5ea9944468e16c3eed15e858fd5de44de1Affected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 6e2848d1c8c0139161e69ac0a94133e90e9988e8Affected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 63559ba8077cbadae1c92a65b73ea522bf377dd9Affected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before ccd811c304d2ee56189bfbc49302cb3c44361893Affected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 8a30da5aa9609663b3e05bcc91a916537f66a4cdAffected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before b08baa75b989cf779cbfa0969681f8ba2dc46569Affected 6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 498dbd9aea205db9da674994b74c7bf8e18448bdAffected 583a4219841d00e96b5de55be160aa7eb7721a4dAffected b4ecc15d6f5a13c0bbe2777438e87e321f83faaaAffected a2259ebaa933331c53904caf792b619ec42f0da5Affected 4.4.95 to before 4.5Affected 4.9.59 to before 4.10Affected 4.13.10 to before 4.14Affected
LinuxLinux	4.14Affected before 4.14Not affected 4.19.324 through 4.19.Not affected 5.4.286 through 5.4.Not affected 5.10.230 through 5.10.Not affected 5.15.172 through 5.15.Not affected 6.1.117 through 6.1.Not affected 6.6.61 through 6.6.Not affected 6.11.8 through 6.11.*Not affected 6.12 and laterNot affected

Product

Versions

LinuxLinux

6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 721ddad945596220c123eb6f7126729fe277ee4fAffected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 4aa77d5ea9944468e16c3eed15e858fd5de44de1Affected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 6e2848d1c8c0139161e69ac0a94133e90e9988e8Affected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 63559ba8077cbadae1c92a65b73ea522bf377dd9Affected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before ccd811c304d2ee56189bfbc49302cb3c44361893Affected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 8a30da5aa9609663b3e05bcc91a916537f66a4cdAffected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before b08baa75b989cf779cbfa0969681f8ba2dc46569Affected
6ed05c68cbcae42cd52b8e53b66952bfa9c002ce to before 498dbd9aea205db9da674994b74c7bf8e18448bdAffected
583a4219841d00e96b5de55be160aa7eb7721a4dAffected
b4ecc15d6f5a13c0bbe2777438e87e321f83faaaAffected
a2259ebaa933331c53904caf792b619ec42f0da5Affected
4.4.95 to before 4.5Affected
4.9.59 to before 4.10Affected
4.13.10 to before 4.14Affected

LinuxLinux

4.14Affected
before 4.14Not affected
4.19.324 through 4.19.*Not affected
5.4.286 through 5.4.*Not affected
5.10.230 through 5.10.*Not affected
5.15.172 through 5.15.*Not affected
6.1.117 through 6.1.*Not affected
6.6.61 through 6.6.*Not affected
6.11.8 through 6.11.*Not affected
6.12 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.