CVE-2024-36896
Last modified
CVE-2024-36896 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value. It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems. The same bug exists in the disable_show() routine, and it can be fixed the same way.. EPSS estimates a 0.92% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disable_store(): usb_hub_to_struct_hub() can return NULL if the hub that the port belongs to is concurrently removed, but the function does not check for this possibility before dereferencing the returned value. It turns out that the first dereference is unnecessary, since hub->intfdev is the parent of the port device, so it can be changed easily. Adding a check for hub == NULL prevents further problems. The same bug exists in the disable_show() routine, and it can be fixed the same way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Linux | Linux Kernel | >= 6.0, < 6.1.91 | — |
| Linux | Linux Kernel | >= 6.2, < 6.6.31 | — |
| Linux | Linux Kernel | >= 6.7, < 6.8.10 | — |
| Linux | Linux Kernel | 6.9 | Rc1 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-36896?
How severe is CVE-2024-36896?
How do I fix CVE-2024-36896?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-36890In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36891In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36892In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36893In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36894In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-36895In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-36897In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36898In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2024-36899In the Linux kernel, the following vulnerability has been re…7
- CVE-2024-3690A vulnerability classified as critical was found in PHPGuruk…8.8
- CVE-2024-36900In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-36901In the Linux kernel, the following vulnerability has been re…5.5
Are you affected by CVE-2024-36896?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST