QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-26964

Back to search

CVE-2024-26964

Published: May 1, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Add error handling in xhci_map_urb_for_dma Currently xhci_map_urb_for_dma() creates a temporary buffer and copies the SG list to the new linear buffer. But if the kzalloc_node() fails, then the following sg_pcopy_to_buffer() can lead to crash since it tries to memcpy to NULL pointer. So return -ENOMEM if kzalloc returns null pointer.

VendorProductVersions

Linux

Linux

affected
2017a1e58472a27e532b9644b4a61dfe18f6baac - < 4a49d24fdec0a802aa686a567a3989a9fdf4e5dd
affected
2017a1e58472a27e532b9644b4a61dfe18f6baac - < b2c898469dfc388f619c6c972a28466cbb1442ea
affected
2017a1e58472a27e532b9644b4a61dfe18f6baac - < 620b6cf2f1a270f48d38e6b8ce199c1acb3e90f4
affected
2017a1e58472a27e532b9644b4a61dfe18f6baac - < 962300a360d24c5be5a188cda48da58a37e4304d
affected
2017a1e58472a27e532b9644b4a61dfe18f6baac - < 7b6cc33593d7ccfc3011b290849cfa899db46757

+1 more versions

Linux

Linux

affected
5.11
unaffected
0 - < 5.11
unaffected
5.15.154 - <= 5.15.*
unaffected
6.1.84 - <= 6.1.*
unaffected
6.6.24 - <= 6.6.*

+3 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now