CVE-2024-42244— USB: serial: mos7840: fix crash on resume
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-42244
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
USB: serial: mos7840: fix crash on resume
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"), USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multiple read URBs was added back in 2011. Specifically, both port read URBs are now submitted on resume for open ports, but the context pointer of the second URB is left set to the core rather than mos7840 port structure. Fix this by implementing dedicated suspend and resume functions for mos7840. Tested with Delock 87414 USB 2.0 to 4x serial adapter. [ johan: analyse crash and rewrite commit message; set busy flag on resume; drop bulk-in check; drop unnecessary usb_kill_urb() ]
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于 USB:serial:mos7840 模块在恢复过程中，由于多个读取URB的支持，如果第二个URB的上下文指针被错误地设置，可能会导致崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2024-42244
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-42244
请登录查看更多情报信息。
Same Patch Batch · Linux · 2024-08-07 · 19 CVEs total
| CVE-2024-42240 | x86/bhi: Avoid warning in #DB handler due to BHI mitigation | |
| CVE-2024-42232 | libceph: fix race between delayed_work() and ceph_monc_stop() | |
| CVE-2024-42234 | mm: fix crashes from deferred split racing folio migration | |
| CVE-2024-42233 | filemap: replace pte_offset_map() with pte_offset_map_nolock() | |
| CVE-2024-42235 | s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() | |
| CVE-2024-42236 | usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() | |
| CVE-2024-42237 | firmware: cs_dsp: Validate payload length before processing block | |
| CVE-2024-42238 | firmware: cs_dsp: Return error if block header overflows file | |
| CVE-2024-42239 | bpf: Fail bpf_timer_cancel when callback is being cancelled | |
| CVE-2024-42250 | cachefiles: add missing lock protection when polling | |
| CVE-2024-42242 | mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE | |
| CVE-2024-42241 | mm/shmem: disable PMD-sized page cache if needed | |
| CVE-2024-42243 | mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray | |
| CVE-2024-42245 | Revert "sched/fair: Make sure to try to detach at least one movable task" | |
| CVE-2024-42246 | net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket | |
| CVE-2024-42247 | wireguard: allowedips: avoid unaligned 64-bit memory accesses | |
| CVE-2024-42249 | spi: don't unoptimize message in spi_async() | |
| CVE-2024-42248 | tty: serial: ma35d1: Add a NULL check for of_node |
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2024-42244
No comments yet