{"id":"CVE-2024-58002","revision":"9d749f1eb0824d5cbf96d30f2e6b7abe","records":[{"revision":"9d749f1eb0824d5cbf96d30f2e6b7abe","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2024-58002","aliases":[],"title":"media: uvcvideo: Remove dangling pointers","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Remove dangling pointers\n\nWhen an async control is written, we copy a pointer to the file handle\nthat started the operation. That pointer will be used when the device is\ndone. Which could be anytime in the future.\n\nIf the user closes that file descriptor, its structure will be freed,\nand there will be one dangling pointer per pending async control, that\nthe driver will try to use.\n\nClean all the dangling pointers during release().\n\nTo avoid adding a performance penalty in the most common case (no async\noperation), a counter has been introduced with some logic to make sure\nthat it is properly handled.","state":0,"publishedAt":"2025-02-27T02:12:00.223+00:00","modifiedAt":"2026-10-15T21:51:50.424+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/usb/uvc/uvc_ctrl.c\",\n                        \"drivers/media/usb/uvc/uvc_v4l2.c\",\n                        \"drivers/media/usb/uvc/uvcvideo.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"2a29413ace64627e178fd422dd8a5d95219a2c0b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"653993f46861f2971e95e9a0e36a34b49dec542c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"ac18d781466252cd35a3e311e0a4b264260fd927\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"4dbaa738c583a0e947803c69e8996e88cf98d971\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"438bda062b2c40ddd7df23b932e29ffe0a448cac\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"9edc7d25f7e49c33a1ce7a5ffadea2222065516c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e5225c820c057537dc780244760e2e24c7d27366\",\n                            \"lessThan\": \"221cd51efe4565501a3dbf04cc011b537dcce7fb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/media/usb/uvc/uvc_ctrl.c\",\n                        \"drivers/media/usb/uvc/uvc_v4l2.c\",\n                        \"drivers/media/usb/uvc/uvcvideo.h\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.291\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.235\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.179\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.130\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.80\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.14\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13.3\",\n                            \"lessThanOrEqual\": \"6.13.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/2a29413ace64627e178fd422dd8a5d95219a2c0b","https://git.kernel.org/stable/c/653993f46861f2971e95e9a0e36a34b49dec542c","https://git.kernel.org/stable/c/117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50","https://git.kernel.org/stable/c/ac18d781466252cd35a3e311e0a4b264260fd927","https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971","https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac","https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c","https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-58002","license":"CVE Program Terms of Use","key":"cve-program:CVE-2024-58002","identifiers":["CVE-2024-58002"]},"retained":false,"historicalAffected":[]}],"coverage":[]}