CVE-2024-45027

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() If xhci_mem_init() fails, it calls into xhci_mem_cleanup() to mop up the damage. If it fails early enough, before xhci->interrupters is allocated but after xhci->max_interrupters has been set, which happens in most (all?) cases, things get uglier, as xhci_mem_cleanup() unconditionally derefences xhci->interrupters. With prejudice. Gate the interrupt freeing loop with a check on xhci->interrupters being non-NULL. Found while debugging a DMA allocation issue that led the XHCI driver on this exact path.

• CWE-459

• https://git.kernel.org/stable/c/3efb29f6a78d4746f958c1ab6cd7981c5762f03b
• https://git.kernel.org/stable/c/770cacc75b0091ece17349195d72133912c1ca7cPatch
• https://git.kernel.org/stable/c/dcdb52d948f3a17ccd3fce757d9bd981d7c32039Patch

Published

Sep 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45021In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45022In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45023In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-45024In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45025In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45026In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-45028In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45029In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-4503A vulnerability classified as critical was found in Ruijie R…7.2
• CVE-2024-45030In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-45031When editing objects in the Syncope Console, incomplete HTML…6.1
• CVE-2024-45032A vulnerability has been identified in Industrial Edge Manag…10