CVE - CVE-2024-50269

CVE-ID
CVE-2024-50269	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca ("usb: musb: sunxi: Explicitly release USB PHY on exit") will cause that usb phy @glue->xceiv is accessed after released. 1) register platform driver @sunxi_musb_driver // get the usb phy @glue->xceiv sunxi_musb_probe() -> devm_usb_get_phy(). 2) register and unregister platform driver @musb_driver musb_probe() -> sunxi_musb_init() use the phy here //the phy is released here musb_remove() -> sunxi_musb_exit() -> devm_usb_put_phy() 3) register @musb_driver again musb_probe() -> sunxi_musb_init() use the phy here but the phy has been released at 2). ... Fixed by reverting the commit, namely, removing devm_usb_put_phy() from sunxi_musb_exit().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/498dbd9aea205db9da674994b74c7bf8e18448bd URL:https://git.kernel.org/stable/c/498dbd9aea205db9da674994b74c7bf8e18448bd MISC:https://git.kernel.org/stable/c/4aa77d5ea9944468e16c3eed15e858fd5de44de1 URL:https://git.kernel.org/stable/c/4aa77d5ea9944468e16c3eed15e858fd5de44de1 MISC:https://git.kernel.org/stable/c/63559ba8077cbadae1c92a65b73ea522bf377dd9 URL:https://git.kernel.org/stable/c/63559ba8077cbadae1c92a65b73ea522bf377dd9 MISC:https://git.kernel.org/stable/c/6e2848d1c8c0139161e69ac0a94133e90e9988e8 URL:https://git.kernel.org/stable/c/6e2848d1c8c0139161e69ac0a94133e90e9988e8 MISC:https://git.kernel.org/stable/c/721ddad945596220c123eb6f7126729fe277ee4f URL:https://git.kernel.org/stable/c/721ddad945596220c123eb6f7126729fe277ee4f MISC:https://git.kernel.org/stable/c/8a30da5aa9609663b3e05bcc91a916537f66a4cd URL:https://git.kernel.org/stable/c/8a30da5aa9609663b3e05bcc91a916537f66a4cd MISC:https://git.kernel.org/stable/c/b08baa75b989cf779cbfa0969681f8ba2dc46569 URL:https://git.kernel.org/stable/c/b08baa75b989cf779cbfa0969681f8ba2dc46569 MISC:https://git.kernel.org/stable/c/ccd811c304d2ee56189bfbc49302cb3c44361893 URL:https://git.kernel.org/stable/c/ccd811c304d2ee56189bfbc49302cb3c44361893
Assigning CNA
kernel.org
Date Record Created
20241021	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241021)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)