PT-2024-33892 · Linux+5 · Linux Kernel+5

Published

2024-10-21

·

Updated

2026-05-26

·

CVE-2024-50056

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)
Description: The issue concerns a potential dereferencing of ERR PTR() in the Linux kernel, specifically in the uvc v4l2.c file. This affects the find format by pix() and uvc v4l2 enum format() functions, as well as a similar issue in the uvc v4l2 try format() function. The problem is related to smatch errors, including drivers/usb/gadget/function/uvc v4l2.c:124 find format by pix() and drivers/usb/gadget/function/uvc v4l2.c:392 uvc v4l2 enum format(), where 'fmtdesc' dereferencing possible ERR PTR() is reported.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-12227
CVE-2024-50056
DLA-4193-1
DSA-5900-1
ECHO-127C-FB5F-89AD
OESA-2024-2446
OPENSUSE-SU-2024:14500-1
OPENSUSE-SU-2025:14705-1
OPENSUSE-SU-2025_1177-1
OPENSUSE-SU-2025_1178-1
OPENSUSE-SU-2025_1180-1
SUSE-SU-2025:01919-1
SUSE-SU-2025:01951-1
SUSE-SU-2025:01967-1
SUSE-SU-2025:1177-1
SUSE-SU-2025:1178-1
SUSE-SU-2025:1180-1
SUSE-SU-2025:20190-1
SUSE-SU-2025:20192-1
SUSE-SU-2025:20260-1
SUSE-SU-2025:20270-1
SUSE-SU-2025_01951-1
SUSE-SU-2025_01967-1
SUSE-SU-2025_1177-1
SUSE-SU-2025_1178-1
SUSE-SU-2025_1180-1
USN-7276-1
USN-7277-1
USN-7310-1
USN-7383-1
USN-7383-2
USN-7384-1
USN-7384-2
USN-7385-1
USN-7386-1
USN-7403-1
USN-7451-1
USN-7468-1
USN-7523-1
USN-7524-1

Affected Products

Astra Linux
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu