PT-2024-32729 · Linux+7 · Linux Kernel+7

Syzbot · Published 2024-10-09 · Updated 2025-09-29 · CVE-2024-47671

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description A kernel-usb-infoleak was reported in the usbtmc write function of the Linux kernel. The issue was identified by the syzbot and has been resolved by clearing the structure before filling fields.

Recommendations For versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the usbtmc module until a patch is available.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-14046

AZL-50812

AZL-51005

BDU:2025-03300

CVE-2024-47671

DLA-4008-1

DLA-4075-1

MGASA-2024-0344

MGASA-2024-0345

OESA-2024-2255

OESA-2024-2257

OESA-2024-2258

OESA-2024-2296

OPENSUSE-SU-2024:14500-1

OPENSUSE-SU-2024_3984-1

OPENSUSE-SU-2024_3986-1

OPENSUSE-SU-2024_4315-1

OPENSUSE-SU-2024_4376-1

OPENSUSE-SU-2025:14705-1

SUSE-SU-2024:3984-1

SUSE-SU-2024:3986-1

SUSE-SU-2024:4315-1

SUSE-SU-2024:4318-1

SUSE-SU-2024:4364-1

SUSE-SU-2024:4376-1

SUSE-SU-2024:4387-1

SUSE-SU-2025:20163-1

SUSE-SU-2025:20164-1

SUSE-SU-2025:20246-1

SUSE-SU-2025:20247-1

USN-7166-1

USN-7166-2

USN-7166-3

USN-7166-4

USN-7186-1

USN-7186-2

USN-7194-1

USN-7276-1

USN-7277-1

USN-7293-1

USN-7294-1

USN-7294-2

USN-7294-3

USN-7294-4

USN-7295-1

USN-7301-1

USN-7303-1

USN-7303-2

USN-7303-3

USN-7304-1

USN-7310-1

USN-7311-1

USN-7384-1

USN-7384-2

USN-7385-1

USN-7386-1

USN-7393-1

USN-7401-1

USN-7403-1

USN-7413-1

USN-7468-1

USN-7539-1

USN-7540-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3176

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47671.json · Exploit
• https://ubuntu.com/security/CVE-2024-53166 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36893 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50016 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49907 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42305 · Security Note
• https://ubuntu.com/security/CVE-2024-43884 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56622 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53103 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53154 · Vendor Advisory