Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2024-58055: Linux Kernel: USB gadget commands can be double-freed
CVE-2024-58055
Summary
A software bug in the Linux kernel's USB gadget driver could cause a command to be freed too early, leading to errors. This can cause data corruption or crashes. Update your Linux kernel to the fixed version to prevent this issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
>= 4.6, < 5.4.291 >= 5.5, < 5.10.235 >= 5.11, < 5.15.179 >= 5.16, < 6.1.129 >= 6.2, < 6.6.76 >= 6.7, < 6.12.13 >= 6.13, < 6.13.2 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
Original title
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_tcm: Don't free command immediately
Don't prematurely free the command. Wait for the status completion of
the se...
Original description
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_tcm: Don't free command immediately
Don't prematurely free the command. Wait for the status completion of
the sense status. It can be freed then. Otherwise we will double-free
the command.
usb: gadget: f_tcm: Don't free command immediately
Don't prematurely free the command. Wait for the status completion of
the sense status. It can be freed then. Otherwise we will double-free
the command.
nvd CVSS3.1
7.8
Vulnerability type
CWE-415
- https://git.kernel.org/stable/c/16907219ad6763f401700e1b57b2da4f3e07f047 Patch
- https://git.kernel.org/stable/c/38229c35a6d7875697dfb293356407330cfcd23e Patch
- https://git.kernel.org/stable/c/7cb72dc08ed8da60fd6d1f6adf13bf0e6ee0f694 Patch
- https://git.kernel.org/stable/c/929b69810eec132b284ffd19047a85d961df9e4d Patch
- https://git.kernel.org/stable/c/bbb7f49839b57d66ccaf7b5752d9b63d3031dd0a Patch
- https://git.kernel.org/stable/c/c225d006a31949d673e646d585d9569bc28feeb9 Patch
- https://git.kernel.org/stable/c/e6693595bd1b55af62d057a4136a89d5c2ddf0e9 Patch
- https://git.kernel.org/stable/c/f0c33e7d387ccbb6870e73a43c558fefede06614 Patch
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
Published: 6 Mar 2025 · Updated: 20 Jul 2026 · First seen: 7 Mar 2026