Linux Kernel Vulnerability in USB Type-C Driver: CVE-2024-50057
Summary
CVE-2024-50057: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Free IRQ only if it was requested before In polling mode, if no IRQ was requested there is no need to free it. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interactions. It supports a wide range of hardware devices and is known for its stability and performance. The USB Type-C driver, specifically the tps6598x module, is responsible for managing USB Type-C connections, enabling features like power delivery and data transfer. This vulnerability arises from improper handling of interrupt requests (IRQs) during the removal of the driver, potentially leading to system warnings and instability.
Vulnerability Detail
CVE-2024-50057 is a vulnerability in the Linux kernel's USB Type-C driver, where the system attempts to free an IRQ that was never requested. This occurs in polling mode when the IRQ is not set, leading to warnings during the removal of the tps6598x module. The warning message indicates a potential flaw in resource management, which could result in degraded performance or unexpected behavior during driver operations. The root cause lies in the failure to check if the IRQ was requested before attempting to free it, which can lead to confusion in the kernel's interrupt handling.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. However, users can avoid removing the tps6598x module while in polling mode to prevent triggering the warning until the kernel is updated.
Conclusion
CVE-2024-50057 is a critical vulnerability in the Linux kernel's USB Type-C driver that can lead to system warnings and potential instability. Users are advised to update their kernels to the latest patched versions to mitigate this issue. Regular monitoring of vulnerabilities using tools like Vulert can help maintain system security.
See every vulnerability recorded for linux →
FAQ
CVE-2024-50057 is a vulnerability in the Linux kernel related to the USB Type-C driver, where an IRQ is improperly freed, leading to system warnings.
This vulnerability can cause warnings during the removal of the tps6598x module, potentially leading to system instability or degraded performance.
If you are using a version of the Linux kernel that includes the affected USB Type-C driver, you may be vulnerable. Use tools like Vulert to check your application.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no specific workarounds, you can avoid removing the tps6598x module until you can apply the kernel update.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
