In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3: st: fix probed platform device ref count on probe error path
The probe function never performs any paltform device allocation, thus error path "undo_platform_dev_alloc" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Dell Powerstore Dsa2025086 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Feb 20, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade dtb-broadcom | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-ibm-6.8Upgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegra-5.15Upgrade linux-xilinxUpgrade linux-nvidia-tegraUpgrade linux-fipsUpgrade linux-realtime-6.8 | Apr 1, 2025 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub