CVE - CVE-2024-56698

CVE-ID
CVE-2024-56698	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is decremented on completion. If a partially completed request is handled, then the dwc3_request->num_queued_sgs no longer reflects the total number of num_queued_sgs (it would be cleared). Correctly check the number of request SG entries remained to be prepare and queued. Failure to do this may cause null pointer dereference when accessing non-existent SG entry.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0247da93bf62d33304b7bf97850ebf2a86e06d28 URL:https://git.kernel.org/stable/c/0247da93bf62d33304b7bf97850ebf2a86e06d28 MISC:https://git.kernel.org/stable/c/1534f6f69393aac773465d80d31801b554352627 URL:https://git.kernel.org/stable/c/1534f6f69393aac773465d80d31801b554352627 MISC:https://git.kernel.org/stable/c/70777a23a54e359cfdfafc625a57cd56434f3859 URL:https://git.kernel.org/stable/c/70777a23a54e359cfdfafc625a57cd56434f3859 MISC:https://git.kernel.org/stable/c/8ceb21d76426bbe7072cc3e43281e70c0d664cc7 URL:https://git.kernel.org/stable/c/8ceb21d76426bbe7072cc3e43281e70c0d664cc7 MISC:https://git.kernel.org/stable/c/b7c3d0b59213ebeedff63d128728ce0b3d7a51ec URL:https://git.kernel.org/stable/c/b7c3d0b59213ebeedff63d128728ce0b3d7a51ec MISC:https://git.kernel.org/stable/c/b7fc65f5141c24785dc8c19249ca4efcf71b3524 URL:https://git.kernel.org/stable/c/b7fc65f5141c24785dc8c19249ca4efcf71b3524 MISC:https://git.kernel.org/stable/c/c9e72352a10ae89a430449f7bfeb043e75c255d9 URL:https://git.kernel.org/stable/c/c9e72352a10ae89a430449f7bfeb043e75c255d9
Assigning CNA
kernel.org
Date Record Created
20241227	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241227)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)