What is CVE-2024-26919?

CVE-2024-26919 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.

How severe is CVE-2024-26919?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Linux

CVE-2024-26919

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: Fix debugfs directory leak The ULPI per-device debugfs root is named after the ulpi device's parent, but ulpi_unregister_interface tries to remove a debugfs directory named after the ulpi device itself. This results in the directory sticking around and preventing subsequent (deferred) probes from succeeding. Change the directory name to match the ulpi device.

EPSS: 0.002 (14.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Linux — versions bd0a0a024f2a41e7cc8eadb9862f82c45884b69c, 5.18, 0
Linux Linux_kernel — versions 6.8

References

416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)
416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch)

Frequently asked questions

What is CVE-2024-26919?: CVE-2024-26919 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2024-04-17.
How severe is CVE-2024-26919?: High severity. CVSS v3 base score is 7.8 out of 10.