Not rated
CVE-2024-44960 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make…
Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn't properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux 6.11 | earliest → < 6.11 | 6.11 |
| Linux 6.10 | earliest → < 6.10.5 | 6.10.5 |
| Linux 6.6 | earliest → < 6.6.46 | 6.6.46 |
| Linux 6.1 | earliest → < 6.1.105 | 6.1.105 |
| Linux 5.15 | earliest → < 5.15.165 | 5.15.165 |
| Linux 5.10 | earliest → < 5.10.224 | 5.10.224 |
| Linux | 5.4 | 5.4.282 |
| Linux 4.19 | earliest → < 4.19.320 | 4.19.320 |
| RUGGEDCOM RST2428P 3.1 | earliest → < 3.1 | 3.1 |
Show the 3 other branches Hide the 3 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family | Versions not published | |
| SCALANCE XCM-/XRM-/XCH-/XRH-300 family 3.1 | earliest → < 3.1 | 3.1 |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | earliest → < 1.1.1 | 1.1.1 |
Other CVEs of Linux
The 18300 CVEs of Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Not rated
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Not rated
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Not rated
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Not rated