CVE-2024-26919

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-26919
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after the ulpi device itself. This results in the directory sticking around and preventing subsequent (deferred) probes from succeeding. Change the directory name to match the ulpi device.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b Patch
https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 Patch
https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 Patch
https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 Patch
https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b Patch
https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 Patch
https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 Patch
https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
History

16 Sep 2025, 17:01

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:6.8:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b - () https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b - Patch
References () https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 - () https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 - Patch
References () https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 - () https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 - Patch
References () https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 - () https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se resolvió la siguiente vulnerabilidad: usb: ulpi: corrige la fuga del directorio debugfs La raíz debugfs por dispositivo ULPI lleva el nombre del dispositivo principal ulpi, pero ulpi_unregister_interface intenta eliminar un directorio debugfs que lleva el nombre del dispositivo ulpi en sí. Esto da como resultado que el directorio permanezca y evite que las pruebas posteriores (diferidas) se realicen correctamente. Cambie el nombre del directorio para que coincida con el dispositivo ulpi.
References () https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b - () https://git.kernel.org/stable/c/330d22aba17a4d30a56f007d0f51291d7e00862b -
References () https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 - () https://git.kernel.org/stable/c/33713945cc92ea9c4a1a9479d5c1b7acb7fc4df3 -
References () https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 - () https://git.kernel.org/stable/c/3caf2b2ad7334ef35f55b95f3e1b138c6f77b368 -
References () https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 - () https://git.kernel.org/stable/c/d31b886ed6a5095214062ee4fb55037eb930adb6 -

17 Apr 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-04-17 16:15

Updated : 2025-09-16 17:01

NVD link : CVE-2024-26919

Mitre link : CVE-2024-26919

CVE.ORG link : CVE-2024-26919

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo