PT-2024-33933 · Linux+4 · Linux Kernel+4
Published
2024-10-17
·
Updated
2025-09-29
·
CVE-2024-50100
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A problem in the Linux kernel has been resolved, related to the dummy-hcd driver. The issue was caused by a difference between the
timer pending() and hrtimer active() APIs, which led to "task hung" problems. The timer pending() function returns True when the timer is queued but not when its callback is running, whereas hrtimer active() returns True when the hrtimer is queued or its callback is running. This difference occasionally caused dummy urb enqueue() to think that the callback routine had not yet started when in fact it was almost finished, resulting in the hrtimer not being restarted and making it impossible for the driver to dequeue later the URB that was just enqueued. This caused usb kill urb() to hang.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Linuxmint
Linux Kernel
Suse
Ubuntu