CVE-2024-45027

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue arises when xhci mem init() fails and calls xhci mem cleanup() to handle the damage. If the failure occurs before xhci->interrupters is allocated but after xhci->max interrupters has been set, xhci mem cleanup() unconditionally dereferences xhci->interrupters, leading to problems. The fix involves gating the interrupt freeing loop with a check on xhci->interrupters being non-NULL. This issue was found while debugging a DMA allocation issue that led the XHCI driver to this exact path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.