In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_tcm: Don't free command immediately
Don't prematurely free the command. Wait for the status completion of the sense status. It can be freed then. Otherwise we will double-free the command.
[
{
"signature_type": "Function",
"id": "CVE-2024-58055-0c883df1",
"signature_version": "v1",
"digest": {
"length": 795.0,
"function_hash": "195630415492209342549466923110770977954"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16907219ad6763f401700e1b57b2da4f3e07f047"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-33c35b82",
"signature_version": "v1",
"digest": {
"length": 749.0,
"function_hash": "221833174445401592616773073681570955644"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16907219ad6763f401700e1b57b2da4f3e07f047"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-41b6cc81",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c225d006a31949d673e646d585d9569bc28feeb9"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-45bbe601",
"signature_version": "v1",
"digest": {
"length": 795.0,
"function_hash": "195630415492209342549466923110770977954"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c225d006a31949d673e646d585d9569bc28feeb9"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-5295d1d0",
"signature_version": "v1",
"digest": {
"length": 795.0,
"function_hash": "195630415492209342549466923110770977954"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6693595bd1b55af62d057a4136a89d5c2ddf0e9"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-6bf62523",
"signature_version": "v1",
"digest": {
"length": 795.0,
"function_hash": "195630415492209342549466923110770977954"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f0c33e7d387ccbb6870e73a43c558fefede06614"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-6da079c6",
"signature_version": "v1",
"digest": {
"length": 795.0,
"function_hash": "195630415492209342549466923110770977954"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@929b69810eec132b284ffd19047a85d961df9e4d"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-718c968d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-725c8e69",
"signature_version": "v1",
"digest": {
"length": 788.0,
"function_hash": "281218837469925235322733993820599560689"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbb7f49839b57d66ccaf7b5752d9b63d3031dd0a"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-73e0f8a9",
"signature_version": "v1",
"digest": {
"length": 749.0,
"function_hash": "221833174445401592616773073681570955644"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f0c33e7d387ccbb6870e73a43c558fefede06614"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-751a64e7",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@929b69810eec132b284ffd19047a85d961df9e4d"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-76add2ba",
"signature_version": "v1",
"digest": {
"length": 749.0,
"function_hash": "221833174445401592616773073681570955644"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c225d006a31949d673e646d585d9569bc28feeb9"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-7e21967a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f0c33e7d387ccbb6870e73a43c558fefede06614"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-9d5dcab1",
"signature_version": "v1",
"digest": {
"length": 742.0,
"function_hash": "6586847283500673053862151425271932104"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbb7f49839b57d66ccaf7b5752d9b63d3031dd0a"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-b5a132ce",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bbb7f49839b57d66ccaf7b5752d9b63d3031dd0a"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-c5710833",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38229c35a6d7875697dfb293356407330cfcd23e"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-cbf0b85c",
"signature_version": "v1",
"digest": {
"length": 786.0,
"function_hash": "110526113534036950947934822204265630473"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-da39cfd9",
"signature_version": "v1",
"digest": {
"length": 749.0,
"function_hash": "221833174445401592616773073681570955644"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6693595bd1b55af62d057a4136a89d5c2ddf0e9"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-e833c8f8",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16907219ad6763f401700e1b57b2da4f3e07f047"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-ef2a551b",
"signature_version": "v1",
"digest": {
"length": 749.0,
"function_hash": "221833174445401592616773073681570955644"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@929b69810eec132b284ffd19047a85d961df9e4d"
},
{
"signature_type": "Line",
"id": "CVE-2024-58055-f61d615a",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"45022072275036804748061667921104348250",
"6895421175159098401887203090594881357",
"265860345355373946644717330069682214806",
"101796856624598355648306495361501042596",
"254685621049785669542320194147047499497",
"235080296999291630736147082271763979239"
]
},
"deprecated": false,
"target": {
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e6693595bd1b55af62d057a4136a89d5c2ddf0e9"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-f83e970e",
"signature_version": "v1",
"digest": {
"length": 808.0,
"function_hash": "244332644293551607286804414373839968514"
},
"deprecated": false,
"target": {
"function": "usbg_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38229c35a6d7875697dfb293356407330cfcd23e"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-f8bd65f0",
"signature_version": "v1",
"digest": {
"length": 740.0,
"function_hash": "145456598383312048138113939489885442135"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694"
},
{
"signature_type": "Function",
"id": "CVE-2024-58055-fa2d3b61",
"signature_version": "v1",
"digest": {
"length": 762.0,
"function_hash": "30916202731555017641578833982849736565"
},
"deprecated": false,
"target": {
"function": "bot_cmd_work",
"file": "drivers/usb/gadget/function/f_tcm.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@38229c35a6d7875697dfb293356407330cfcd23e"
}
]