CVE-2024-26919

MEDIUM

Linux Kernel - Debugfs Directory Leak in ULPI Interface

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after the ulpi device itself. This results in the directory sticking around and preventing subsequent (deferred) probes from succeeding. Change the directory name to match the ulpi device.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0022
EPSS Percentile 12.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (15)
linux/Kernel 5.18.0 - 6.1.79linux
linux/Kernel 6.2.0 - 6.6.18linux
linux/Kernel 6.7.0 - 6.7.6linux
Linux/Linux < 5.18
Linux/Linux 5.18
Linux/Linux 6.1.79 - 6.1.*
Linux/Linux 6.6.18 - 6.6.*
Linux/Linux 6.7.6 - 6.7.*
Linux/Linux 6.8
Linux/Linux bd0a0a024f2a41e7cc8eadb9862f82c45884b69c - 330d22aba17a4d30a56f007d0f51291d7e00862b
... and 5 more
Published Apr 17, 2024
Tracked Since Feb 18, 2026