CVE-2024-50056

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50056
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50056
Downstream
Related
Published
2024-10-21T19:39:47Z
Modified
2026-08-12T03:30:40Z
Summary
usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c

Fix potential dereferencing of ERR_PTR() in find_format_by_pix() and uvc_v4l2_enum_format().

Fix the following smatch errors:

drivers/usb/gadget/function/uvc_v4l2.c:124 find_format_by_pix() error: 'fmtdesc' dereferencing possible ERR_PTR()

drivers/usb/gadget/function/uvc_v4l2.c:392 uvc_v4l2_enum_format() error: 'fmtdesc' dereferencing possible ERR_PTR()

Also, fix similar issue in uvc_v4l2_try_format() for potential dereferencing of ERR_PTR().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50056.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
588b9e85609bcb2f84a2be83591480aa943943b6
Fixed
03fa71e97e9bb116993ec1d51b8a6fe776db0984
Fixed
72a68d2bede3284b95ee93a5ab3a81758bba95b0
Fixed
cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6
Fixed
a7bb96b18864225a694e3887ac2733159489e4b0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.133
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.86
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json"