Lucene search

K
redhatcveRedhat.comRH:CVE-2024-44960
HistorySep 04, 2024 - 8:45 p.m.

CVE-2024-44960

2024-09-0420:45:52
redhat.com
access.redhat.com
linux kernel
usb gadget
core vulnerability
descriptor checking
malware
endpoint configuration

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

13.7%

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: core: Check for unset descriptor Make sure the descriptor has been set before looking at maxpacket. This fixes a null pointer panic in this case. This may happen if the gadget doesn’t properly set up the endpoint for the current speed, or the gadget descriptors are malformed and the descriptor for the speed/endpoint are not found. No current gadget driver is known to have this problem, but this may cause a hard-to-find bug during development of new gadgets.

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

13.7%