In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is decremented on completion. If a partially completed request is handled, then the dwc3_request->num_queued_sgs no longer reflects the total number of num_queued_sgs (it would be cleared). Correctly check the number of request SG entries remained to be prepare and queued. Failure to do this may cause null pointer dereference when accessing non-existent SG entry.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/0247da93bf62d33304b7bf97850ebf2a86e06d28 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/1534f6f69393aac773465d80d31801b554352627 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/70777a23a54e359cfdfafc625a57cd56434f3859 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/8ceb21d76426bbe7072cc3e43281e70c0d664cc7 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/b7c3d0b59213ebeedff63d128728ce0b3d7a51ec cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/b7fc65f5141c24785dc8c19249ca4efcf71b3524 cve-icon cve-icon
https://git.kernel.org/stable/c/c9e72352a10ae89a430449f7bfeb043e75c255d9 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-56698 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-56698 cve-icon
History

Wed, 01 Oct 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 31 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Thu, 09 Jan 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Sat, 28 Dec 2024 10:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Fix looping of queued SG entries The dwc3_request->num_queued_sgs is decremented on completion. If a partially completed request is handled, then the dwc3_request->num_queued_sgs no longer reflects the total number of num_queued_sgs (it would be cleared). Correctly check the number of request SG entries remained to be prepare and queued. Failure to do this may cause null pointer dereference when accessing non-existent SG entry.
Title usb: dwc3: gadget: Fix looping of queued SG entries
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-12-28T09:46:21.363Z

Updated: 2025-10-01T20:07:07.702Z

Reserved: 2024-12-27T15:00:39.850Z

Link: CVE-2024-56698

cve-icon Vulnrichment

Updated: 2025-10-01T15:47:09.443Z

cve-icon NVD

Status : Modified

Published: 2024-12-28T10:15:16.473

Modified: 2025-10-01T20:17:41.690

Link: CVE-2024-56698

cve-icon Redhat

Severity : Low

Publid Date: 2024-12-28T00:00:00Z

Links: CVE-2024-56698 - Bugzilla