Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-56698 Details

Description

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is decremented on completion. If a partially completed request is handled, then the dwc3_request->num_queued_sgs no longer reflects the total number of num_queued_sgs (it would be cleared). Correctly check the number of request SG entries remained to be prepare and queued. Failure to do this may cause null pointer dereference when accessing non-existent SG entry.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CNA: CISA-ADPCVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/0247da93bf62d33304b7bf97850ebf2a86e06d28	kernel.org	Patch
https://git.kernel.org/stable/c/1534f6f69393aac773465d80d31801b554352627	kernel.org	Patch
https://git.kernel.org/stable/c/70777a23a54e359cfdfafc625a57cd56434f3859	kernel.org	Patch
https://git.kernel.org/stable/c/8ceb21d76426bbe7072cc3e43281e70c0d664cc7	kernel.org	Patch
https://git.kernel.org/stable/c/b7c3d0b59213ebeedff63d128728ce0b3d7a51ec	kernel.org	Patch
https://git.kernel.org/stable/c/b7fc65f5141c24785dc8c19249ca4efcf71b3524	kernel.org	Patch
https://git.kernel.org/stable/c/c9e72352a10ae89a430449f7bfeb043e75c255d9	kernel.org	Patch
https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html	CVE
https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html	CVE

see all 9 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-476	NULL Pointer Dereference	[email protected]
CWE-476	NULL Pointer Dereference	CISA-ADP

Affected Products

Product	Versions
linux linux kernel	>= 4.18, < 5.10.231 >= 5.11, < 5.15.174 >= 5.16, < 6.1.120 >= 6.2, < 6.6.64 >= 6.7, < 6.11.11
CPE cpe:2.3:o:linux:linux_kernel:::::::: Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 3, 2025	CVE Modified	CVE
Oct 1, 2025	CVE Modified	CISA-ADP
Jan 31, 2025	Initial Analysis	[email protected]
Dec 28, 2024	New CVE Received	kernel.org