CVE-2024-27072

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-27072
In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_video_free() because are useless and may led to a deadlock as reported here: https://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000 Also remove usbtv_stop() call since it will be called when unregistering the device. Before 'c838530d230b' this issue would only be noticed if you disconnect while streaming and now it is noticeable even when disconnecting while not streaming. [hverkuil: fix minor spelling mistake in log message]

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 Patch
https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 Patch
https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 Patch
https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7 Patch
https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd Patch
https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf Patch
https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 Patch
https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 Apr 2025, 19:42

Type Values Removed Values Added
CWE CWE-667
First Time Linux linux Kernel
Linux
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 - () https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 - Patch
References () https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 - () https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 - Patch
References () https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 - () https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 - Patch
References () https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7 - () https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7 - Patch
References () https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd - () https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd - Patch
References () https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf - () https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf - Patch

21 Nov 2024, 09:03

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 - () https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 -
References () https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 - () https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895 -

31 Oct 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

17 Oct 2024, 14:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 -
  • () https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7 -
  • () https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd -

10 Oct 2024, 12:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: medios: usbtv: Eliminar bloqueos inútiles en usbtv_video_free() Eliminar llamadas de bloqueos en usbtv_video_free() porque son inútiles y pueden provocar un punto muerto como se informa aquí: https://syzkaller.appspot .com/x/bisect.txt?x=166dc872180000 También elimine la llamada usbtv_stop() ya que se llamará al cancelar el registro del dispositivo. Antes de 'c838530d230b', este problema solo se notaba si se desconectaba mientras se transmitía y ahora se nota incluso cuando se desconecta mientras no se transmite. [hverkuil: corrige un error ortográfico menor en el mensaje de registro]

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-04-08 19:42

NVD link : CVE-2024-27072

Mitre link : CVE-2024-27072

CVE.ORG link : CVE-2024-27072

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-667

Improper Locking