CVE-2024-50056

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50056
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50056
Downstream
Related
Published
2024-10-21T19:39:47.131Z
Modified
2026-05-13T03:51:53.887158533Z
Summary
usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Fix ERRPTR dereference in uvcv4l2.c

Fix potential dereferencing of ERRPTR() in findformatbypix() and uvcv4l2enum_format().

Fix the following smatch errors:

drivers/usb/gadget/function/uvcv4l2.c:124 findformatbypix() error: 'fmtdesc' dereferencing possible ERR_PTR()

drivers/usb/gadget/function/uvcv4l2.c:392 uvcv4l2enumformat() error: 'fmtdesc' dereferencing possible ERR_PTR()

Also, fix similar issue in uvcv4l2tryformat() for potential dereferencing of ERRPTR().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50056.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
588b9e85609bcb2f84a2be83591480aa943943b6
Fixed
03fa71e97e9bb116993ec1d51b8a6fe776db0984
Fixed
72a68d2bede3284b95ee93a5ab3a81758bba95b0
Fixed
cedeb36c3ff4acd0f3d09918dfd8ed1df05efdd6
Fixed
a7bb96b18864225a694e3887ac2733159489e4b0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.133
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.86
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json"