Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2024-50057— usb: typec: tipd: Free IRQ only if it was requested before

AI Predicted 5.5 Difficulty: Moderate EPSS 0.21% · P12

Affected Version Matrix 8

VendorProductVersion RangeStatus
LinuxLinux0a4c005bd1715d8b32a368ed5516a6ee7e603d18< b72bf5cade51ba4055c8a8998d275e72e6b521ceaffected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18< 4d4b23c119542fbaed2a16794d3801cb4806ea02affected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18< db63d9868f7f310de44ba7bea584e2454f8b4ed0affected
4.15affected
< 4.15unaffected
6.6.57≤ 6.6.*unaffected
6.11.4≤ 6.11.*unaffected
6.12≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2024-50057

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usb: typec: tipd: Free IRQ only if it was requested before
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Free IRQ only if it was requested before In polling mode, if no IRQ was requested there is no need to free it. Call devm_free_irq() only if client->irq is set. This fixes the warning caused by the tps6598x module removal: WARNING: CPU: 2 PID: 333 at kernel/irq/devres.c:144 devm_free_irq+0x80/0x8c ... ... Call trace: devm_free_irq+0x80/0x8c tps6598x_remove+0x28/0x88 [tps6598x] i2c_device_remove+0x2c/0x9c device_remove+0x4c/0x80 device_release_driver_internal+0x1cc/0x228 driver_detach+0x50/0x98 bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 i2c_del_driver+0x54/0x64 tps6598x_i2c_driver_exit+0x18/0xc3c [tps6598x] __arm64_sys_delete_module+0x184/0x264 invoke_syscall+0x48/0x110 el0_svc_common.constprop.0+0xc8/0xe8 do_el0_svc+0x20/0x2c el0_svc+0x28/0x98 el0t_64_sync_handler+0x13c/0x158 el0t_64_sync+0x190/0x194
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞,该漏洞源于在typec tipd驱动中未正确处理IRQ释放,可能导致警告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 ~ b72bf5cade51ba4055c8a8998d275e72e6b521ce -
LinuxLinux 4.15 -

II. Public POCs for CVE-2024-50057

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-50057

登录查看更多情报信息。

Same Patch Batch · Linux · 2024-10-21 · 372 CVEs total

CVE-2024-500339.8 CRITICALslip: make slhc_remember() more robust against malicious packets
CVE-2024-498559.8 CRITICALnbd: fix race between timeout and normal completion
CVE-2024-476959.8 CRITICALRDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
CVE-2022-489859.8 CRITICALnet: mana: Fix race on per-CQ variable napi work_done
CVE-2022-490039.8 CRITICALnvme: fix SRCU protection of nvme_ns_head list
CVE-2024-500439.8 CRITICALnfsd: fix possible badness in FREE_STATEID
CVE-2024-500479.8 CRITICALsmb: client: fix UAF in async decryption
CVE-2024-500469.8 CRITICALNFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
CVE-2024-499969.4 CRITICALcifs: Fix buffer overflow when parsing NFS reparse points
CVE-2024-476789.4 CRITICALicmp: change the order of rate limits
CVE-2022-489628.8 HIGHnet: hisilicon: Fix potential use-after-free in hisi_femac_rx()
CVE-2024-499508.8 HIGHBluetooth: L2CAP: Fix uaf in l2cap_connect
CVE-2024-499398.8 HIGHwifi: rtw89: avoid to add interface to list twice when SER
CVE-2022-489678.8 HIGHNFC: nci: Bounds check struct nfc_target arrays
CVE-2022-489648.8 HIGHravb: Fix potential use-after-free in ravb_rx_gbeth()
CVE-2024-500298.8 HIGHBluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
CVE-2024-499308.8 HIGHwifi: ath11k: fix array out-of-bound access in SoC stats
CVE-2024-500418.8 HIGHi40e: Fix macvlan leak by synchronizing access to mac_filter_hash
CVE-2024-499368.8 HIGHnet/xen-netback: prevent UAF in xenvif_flush_hash()
CVE-2022-489548.8 HIGHs390/qeth: fix use-after-free in hsci

Showing top 20 of 372 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2024-50057

No comments yet


Leave a comment