Lucene search

K
osvGoogleOSV:CVE-2024-43883
HistoryAug 23, 2024 - 1:15 p.m.

CVE-2024-43883

2024-08-2313:15:03
Google
osv.dev
linux kernel
usb driver
vulnerability
resolution

AI Score

6.6

Confidence

Low

In the Linux kernel, the following vulnerability has been resolved:

usb: vhci-hcd: Do not drop references before new references are gained

At a few places the driver carries stale pointers
to references that can still be used. Make sure that does not happen.
This strictly speaking closes ZDI-CAN-22273, though there may be
similar races in the driver.