Vulnerability · Published Aug 7, 2024 · Assigned by Linux

CVE-2024-42244USB: serial: mos7840: fix crash on resume

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 86.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: USB: serial: mos7840: fix crash on resume Since commit c49cfa917025 ("USB: serial: use generic method if no alternative is provided in usb serial layer"), USB serial core calls the generic resume implementation when the driver has not provided one. This can trigger a crash on resume with mos7840 since support for multiple read URBs was added back in 2011. Specifically, both port read URBs are now submitted on resume for open ports, but the context pointer of the second URB is left set to the core rather than mos7840 port structure. Fix this by implementing dedicated suspend and resume functions for mos7840. Tested with Delock 87414 USB 2.0 to 4x serial adapter. [ johan: analyse crash and rewrite commit message; set busy flag on resume; drop bulk-in check; drop unnecessary usb_kill_urb() ]

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9bpftool7.4.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-devel-matched5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-64k-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-abi-stablelists4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-abi-stablelists5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-cross-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-cross-headers5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-debug4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-debug-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-debug-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-debug-devel-matched5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-debug-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-debug-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-debug-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-debug-uki-virt5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-devel-matched5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-doc4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-doc5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-headers5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-debug4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-debug-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-rt-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:9kernel-rt-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-tools4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-tools-libs4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools-libs5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-tools-libs-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-uki-virt5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-uki-virt-addons5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-zfcpdump4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-devel5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-modules5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9libperf5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8perf4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9perf5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:8python3-perf4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:9python3-perf5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9rtla5.14.0-503.15.1.el9_5ALSA-2024:10274
AlmaLinux:9rv5.14.0-503.15.1.el9_5ALSA-2024:10274
Debian:12linux6.1.106-1DEBIAN-CVE-2024-42244
Debian:13linux6.9.10-1DEBIAN-CVE-2024-42244
Debian:14linux6.9.10-1DEBIAN-CVE-2024-42244
Rocky Linux:8kernel0:4.18.0-553.27.1.el8_10RLSA-2024:8856
Rocky Linux:8kernel-rt0:4.18.0-553.27.1.rt7.368.el8_10RLSA-2024:8870
Ubuntu:22.04:LTSlinux5.15.0-121.131UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux6.8.0-48.48UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-aws5.15.0-1069.75UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-aws6.8.0-1018.20UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1018.19~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure5.15.0-1072.81UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-azure6.8.0-1017.20UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1017.20~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1072.81.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gcp5.15.0-1068.76UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-gcp6.8.0-1017.19UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gke5.15.0-1066.72UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-gke6.8.0-1013.17UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1052.59UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1002.4UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-48.48~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-ibm5.15.0-1062.65UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-ibm6.8.0-1015.15UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1064.70UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-kvm5.15.0-1066.71UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-121.131UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-48.48.3UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-48.48.3~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1064.65UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1017.19UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1017.19~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1017.19.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1028.28UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1016.16UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1016.16UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oracle5.15.0-1067.73UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-oracle6.8.0-1015.16UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1015.15~22.04.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-raspi5.15.0-1062.65UBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-raspi6.8.0-1014.16UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-riscv6.8.0-48.48.1UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-48.48.1~22.04.2UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-42244
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1009.10UBUNTU-CVE-2024-42244
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1035.39UBUNTU-CVE-2024-42244

Affected products (as reported)

VendorProductVersions
Linux Linux d83b405383c965498923f3561c3321e2b5df5727 – before 932a86a711c722b45ed47ba2103adca34d225b33d83b405383c965498923f3561c3321e2b5df5727 – before b14aa5673e0a8077ff4b74f0bb260735e7d5e6a4d83b405383c965498923f3561c3321e2b5df5727 – before 1094ed500987e67a9d18b0f95e1812f1cc720856d83b405383c965498923f3561c3321e2b5df5727 – before 5ae6a64f18211851c8df6b4221381c438b9a7348d83b405383c965498923f3561c3321e2b5df5727 – before 553e67dec846323b5575e78a776cf594c13f98c4d83b405383c965498923f3561c3321e2b5df5727 – before c15a688e49987385baa8804bf65d570e362f8576
Linux Linux 3.3

References