CVE-2024-58079

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb interface, the cleanup functions are never called. In our case, the IRQ is never disabled. If an IRQ is triggered, it will try to access memory sections that are already free, causing an OOPS. We cannot use the function devm_request_threaded_irq here. The devm_* clean functions may be called after the main structure is released by uvc_delete. Luckily this bug has small impact, as it is only affected by devices with gpio units and the user has to unbind the device, a disconnect will not trigger this error.

• https://git.kernel.org/stable/c/0b5e0445bc8384c18bd35cb9fe87f6258c6271d9Patch
• https://git.kernel.org/stable/c/0fdd7cc593385e46e92e180b71e264fc9c195298Patch
• https://git.kernel.org/stable/c/3c00e94d00ca079bef7906d6f39d1091bccfedd3Patch
• https://git.kernel.org/stable/c/5d2e65cbe53d0141ed095cf31c2dcf3d8668c11dPatch
• https://git.kernel.org/stable/c/a9ea1a3d88b7947ce8cadb2afceee7a54872bbc5Patch
• https://git.kernel.org/stable/c/d2eac8b14ac690aa73052aa6d4ba69005715367ePatch
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Published

Mar 6, 2025

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-58073In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58074In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58075In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58076In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58077In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58078In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-5808The WP Ajax Contact Form WordPress plugin through 2.2.2 does…4.3
• CVE-2024-58080In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58081In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58082In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-58083In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-58084In the Linux kernel, the following vulnerability has been re…5.5