CVE-2024-26747

一、漏洞信息
漏洞编号：CVE-2024-26747
漏洞归属组件：kernel
漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.0,6.1.14,6.1.19,6.1.5,6.1.6,6.1.8,6.4.0
CVSS V2.0分值：
BaseScore：0.0 Low
Vector：CVSS：2.0/
漏洞简述：
In the Linux kernel, the following vulnerability has been resolved:usb: roles: fix NULL pointer issue when put module s referenceIn current design, usb role class driver will get usb_role_switch parent smodule reference after the user get usb_role_switch device and put thereference after the user put the usb_role_switch device. However, theparent device of usb_role_switch may be removed before the user put theusb_role_switch. If so, then, NULL pointer issue will be met when the userput the parent module s reference.This will save the module pointer in structure of usb_role_switch. Then,we don t need to find module by iterating long relations.
漏洞公开时间：2024-04-04 01:15:51
漏洞创建时间：2024-04-04 04:05:26
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-26747

更多参考(点击展开)

参考来源	参考链接	来源链接
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913
suse_bugzilla	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-26747	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://www.cve.org/CVERecord?id=CVE-2024-26747	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://bugzilla.redhat.com/show_bug.cgi?id=2273072	https://bugzilla.suse.com/show_bug.cgi?id=1222609
suse_bugzilla	https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2024/CVE-2024-26747.mbox	https://bugzilla.suse.com/show_bug.cgi?id=1222609
redhat_bugzilla	https://lore.kernel.org/linux-cve-announce/2024040301-CVE-2024-26747-50b0@gregkh/T	https://bugzilla.redhat.com/show_bug.cgi?id=2273072
ubuntu	https://git.kernel.org/linus/1c9be13846c0b2abc2480602f8ef421360e1ad9e (6.8-rc6)	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://www.cve.org/CVERecord?id=CVE-2024-26747	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://nvd.nist.gov/vuln/detail/CVE-2024-26747	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://launchpad.net/bugs/cve/CVE-2024-26747	https://ubuntu.com/security/CVE-2024-26747
ubuntu	https://security-tracker.debian.org/tracker/CVE-2024-26747	https://ubuntu.com/security/CVE-2024-26747
debian		https://security-tracker.debian.org/tracker/CVE-2024-26747
ubuntu	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-26747	https://ubuntu.com/security/CVE-2024-26747

漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：

详情(点击展开)

影响的包	修复版本	修复补丁	问题引入补丁	来源
linux		https://git.kernel.org/linus/1c9be13846c0b2abc2480602f8ef421360e1ad9e	https://git.kernel.org/linus/5c54fcac9a9de559b444ac63ec3cd82f1d157a0b	ubuntu

二、漏洞分析结构反馈
影响性分析说明：
In the Linux kernel, the following vulnerability has been resolved:usb: roles: fix NULL pointer issue when put module s referenceIn current design, usb role class driver will get usb_role_switch parent smodule reference after the user get usb_role_switch device and put thereference after the user put the usb_role_switch device. However, theparent device of usb_role_switch may be removed before the user put theusb_role_switch. If so, then, NULL pointer issue will be met when the userput the parent module s reference.This will save the module pointer in structure of usb_role_switch. Then,we don t need to find module by iterating long relations.
openEuler评分：
4.3
Vector：CVSS：2.0/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
受影响版本排查(受影响/不受影响)：
1.openEuler-22.03-LTS(5.10.0):受影响
2.openEuler-22.03-LTS-SP1(5.10.0):受影响
3.openEuler-22.03-LTS-SP2(5.10.0):受影响
4.openEuler-22.03-LTS-SP3:受影响
5.openEuler-20.03-LTS-SP1(4.19.90):不受影响
6.openEuler-20.03-LTS-SP4:不受影响
7.master(6.1.0):不受影响
8.openEuler-22.03-LTS-Next(5.10.0):不受影响
9.openEuler-24.03-LTS(6.6.0):不受影响
10.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(4.19.90):否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS(5.10.0):否
4.openEuler-22.03-LTS-SP1(5.10.0):否
5.openEuler-22.03-LTS-SP2(5.10.0):否
6.openEuler-22.03-LTS-SP3:否
7.master(6.1.0):否
8.openEuler-22.03-LTS-Next(5.10.0):否
9.openEuler-24.03-LTS(6.6.0):否
10.openEuler-24.03-LTS-Next(6.6.0):否

Hi openeuler-ci-bot, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Kernel, and any of the maintainers.

@YangYingliang ,@成坚 (CHENG Jian) ,@jiaoff ,@AlexGuo ,@hanjun-guo ,@woqidaideshi ,@Jackie Liu ,@Zhang Yi ,@colyli ,@ThunderTown ,@htforge ,@Chiqijun ,@冷嘲啊 ,@zhujianwei001 ,@kylin-mayukun ,@wangxiongfeng ,@Kefeng ,@SuperSix173 ,@WangShaoBo ,@Zheng Zucheng
issue处理注意事项:
1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;
2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;
3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否))不能省略,省略后cve-manager将无法正常解析填写内容.

影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响):
1.master(6.1.0):
2.openEuler-20.03-LTS-SP1(4.19.90):
3.openEuler-20.03-LTS-SP4:
4.openEuler-22.03-LTS(5.10.0):
5.openEuler-22.03-LTS-Next(5.10.0):
6.openEuler-22.03-LTS-SP1(5.10.0):
7.openEuler-22.03-LTS-SP2(5.10.0):
8.openEuler-22.03-LTS-SP3:
9.openEuler-24.03-LTS:
10.openEuler-24.03-LTS-Next:

修复是否涉及abi变化(是/否)：
1.master(6.1.0):
2.openEuler-20.03-LTS-SP1(4.19.90):
3.openEuler-20.03-LTS-SP4:
4.openEuler-22.03-LTS(5.10.0):
5.openEuler-22.03-LTS-Next(5.10.0):
6.openEuler-22.03-LTS-SP1(5.10.0):
7.openEuler-22.03-LTS-SP2(5.10.0):
8.openEuler-22.03-LTS-SP3:
9.openEuler-24.03-LTS:
10.openEuler-24.03-LTS-Next:

issue处理具体操作请参考:
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

参考网址	关联pr	状态	补丁链接
https://nvd.nist.gov/vuln/detail/CVE-2024-26747	None	None	https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
https://ubuntu.com/security/CVE-2024-26747	None	None	https://discourse.ubuntu.com/c/ubuntu-pro
https://www.opencve.io/cve/CVE-2024-26747	None	None	https://git.kernel.org/stable/c/4b45829440b1b208948b39cc71f77a37a2536734 https://git.kernel.org/stable/c/0158216805ca7e498d07de38840d2732166ae5fa https://git.kernel.org/stable/c/1c9be13846c0b2abc2480602f8ef421360e1ad9e https://git.kernel.org/stable/c/01f82de440f2ab07c259b7573371e1c42e5565db https://git.kernel.org/stable/c/ef982fc41055fcebb361a92288d3225783d12913 https://git.kernel.org/stable/c/e279bf8e51893e1fe160b3d8126ef2dd00f661e1
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2024-26747
https://security-tracker.debian.org/tracker/CVE-2024-26747	None	None	https://git.kernel.org/linus/1c9be13846c0b2abc2480602f8ef421360e1ad9e

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

CVE-2024-26747

影响性分析说明：
In the Linux kernel, the following vulnerability has been resolved:

usb: roles: fix NULL pointer issue when put module's reference

In current design, usb role class driver will get usb_role_switch parent's
module reference after the user get usb_role_switch device and put the
reference after the user put the usb_role_switch device. However, the
parent device of usb_role_switch may be removed before the user put the
usb_role_switch. If so, then, NULL pointer issue will be met when the user
put the parent module's reference.

This will save the module pointer in structure of usb_role_switch. Then,
we don't need to find module by iterating long relations.

openEuler评分:(评分和向量)
4.3
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

受影响版本排查(受影响/不受影响):
1.openEuler-20.03-LTS-SP1:不受影响
2.openEuler-20.03-LTS-SP4:不受影响
3.openEuler-22.03-LTS:受影响
4.openEuler-22.03-LTS-SP1:受影响
5.openEuler-22.03-LTS-SP2:受影响
6.openEuler-22.03-LTS-SP3:受影响
7.master(6.1.0):不受影响
8.openEuler-22.03-LTS-Next:不受影响
9.openEuler-24.03-LTS:不受影响
10.openEuler-24.03-LTS-Next:不受影响

修复是否涉及abi变化(是/否)：
1.openEuler-20.03-LTS-SP1(4.19.90):否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS:否
4.openEuler-22.03-LTS-SP1:否
5.openEuler-22.03-LTS-SP2:否
6.openEuler-22.03-LTS-SP3:否
7.master(6.1.0):否
8.openEuler-22.03-LTS-Next:否
9.openEuler-24.03-LTS:否
10.openEuler-24.03-LTS-Next:否

===========================================================

@sanglipeng 经过 cve-manager 解析, 已分析的内容如下表所示:

状态	需分析	内容
已分析	1.影响性分析说明	In the Linux kernel, the following vulnerability has been resolved:usb: roles: fix NULL pointer issue when put module's referenceIn current design, usb role class driver will get usb_role_switch parent'smodule reference after the user get usb_role_switch device and put thereference after the user put the usb_role_switch device. However, theparent device of usb_role_switch may be removed before the user put theusb_role_switch. If so, then, NULL pointer issue will be met when the userput the parent module's reference.This will save the module pointer in structure of usb_role_switch. Then,we don't need to find module by iterating long relations.
已分析	2.openEulerScore	4.3
已分析	3.openEulerVector	AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
已分析	4.受影响版本排查	openEuler-22.03-LTS:受影响,openEuler-22.03-LTS-SP1:受影响,openEuler-22.03-LTS-SP2:受影响,openEuler-22.03-LTS-SP3:受影响,openEuler-20.03-LTS-SP1:不受影响,openEuler-20.03-LTS-SP4:不受影响,master:不受影响,openEuler-22.03-LTS-Next:不受影响,openEuler-24.03-LTS:不受影响,openEuler-24.03-LTS-Next:不受影响
已分析	5.修复是否涉及abi变化	openEuler-20.03-LTS-SP1:否,openEuler-20.03-LTS-SP4:否,openEuler-22.03-LTS:否,openEuler-22.03-LTS-SP1:否,openEuler-22.03-LTS-SP2:否,openEuler-22.03-LTS-SP3:否,master:否,openEuler-22.03-LTS-Next:否,openEuler-24.03-LTS:否,openEuler-24.03-LTS-Next:否

请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.

@成坚 (CHENG Jian) ,@Xie XiuQi ,@YangYingliang ,@pi3orama ,@jiaoff ,@郭梦琪
关闭issue前,需要将受影响的分支在合并pr时关联上当前issue编号: #I9E2O4:CVE-2024-26747
受影响分支: openEuler-22.03-LTS/openEuler-22.03-LTS-SP1/openEuler-22.03-LTS-SP2/openEuler-22.03-LTS-SP3
具体操作参考: https://gitee.com/help/articles/4142

src-openEuler / kernel

Content Risk Flag

Comments (5)

src-openEuler / kernel .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2024-26747

Comments (5)

Search

src-openEuler / kernel