CVE-2024-50267

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use after free vulnerability in the Linux kernel, specifically in the io edgeport module. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The problem arises from the dev dbg function being called after usb free urb, resulting in a use after free of the urb pointer. To avoid this issue, the dev pointer is stored at the start of the function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.