CVE-2024-50056

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-50056
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-50056
Downstream
Related
Published
2024-10-21T19:39:47.131Z
Modified
2026-05-15T04:10:53.402410594Z
Summary
usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
Details

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: uvc: Fix ERRPTR dereference in uvcv4l2.c

Fix potential dereferencing of ERRPTR() in findformatbypix() and uvcv4l2enum_format().

Fix the following smatch errors:

drivers/usb/gadget/function/uvcv4l2.c:124 findformatbypix() error: 'fmtdesc' dereferencing possible ERR_PTR()

drivers/usb/gadget/function/uvcv4l2.c:392 uvcv4l2enumformat() error: 'fmtdesc' dereferencing possible ERR_PTR()

Also, fix similar issue in uvcv4l2tryformat() for potential dereferencing of ERRPTR().

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50056.json"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.133
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.86
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.11.4

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-50056.json"