01 Record

CVE-2024-57981

usb: xhci: Fix NULL pointer dereference on certain command aborts

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

usb: xhci: Fix NULL pointer dereference on certain command aborts

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.25% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 16.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 02:07Z1 YR AGO

Last updated

2026-05-12 12:01Z3 MO AGO

Reserved

2025-02-27

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

1faefa97233187f5e304df5db53ecf05712adab052a5259d1a2dee981b05c9b7

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc311e391a7efd101250c0e123286709b7e736249 to < fd8bfaeba4a85b14427899adec0efb3954300653, c311e391a7efd101250c0e123286709b7e736249 to < b44253956407046e5907d4d72c8fa5b93ae94485, c311e391a7efd101250c0e123286709b7e736249 to < cf30300a216a4f8dce94e11781a866a09d4b50d4, c311e391a7efd101250c0e123286709b7e736249 to < 4ff18870af793ce2034a6ad746e91d0a3d985b88, c311e391a7efd101250c0e123286709b7e736249 to < b649f0d5bc256f691c7d234c3986685d54053de1, c311e391a7efd101250c0e123286709b7e736249 to < ae069cd2ba09a2bd6a87a68c59ef0b7ea39cd641, c311e391a7efd101250c0e123286709b7e736249 to < 0ce5c0dac768be14afe2426101b568a0f66bfc4d, c311e391a7efd101250c0e123286709b7e736249 to < 1e0a19912adb68a4b2b74fd77001c96cd83eb073, 3.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/fd8bfaeba4a85b14427899adec0efb3954300653
git.kernel.orghttps://git.kernel.org/stable/c/b44253956407046e5907d4d72c8fa5b93ae94485
git.kernel.orghttps://git.kernel.org/stable/c/cf30300a216a4f8dce94e11781a866a09d4b50d4
git.kernel.orghttps://git.kernel.org/stable/c/4ff18870af793ce2034a6ad746e91d0a3d985b88
git.kernel.orghttps://git.kernel.org/stable/c/b649f0d5bc256f691c7d234c3986685d54053de1
git.kernel.orghttps://git.kernel.org/stable/c/ae069cd2ba09a2bd6a87a68c59ef0b7ea39cd641
git.kernel.orghttps://git.kernel.org/stable/c/0ce5c0dac768be14afe2426101b568a0f66bfc4d
git.kernel.orghttps://git.kernel.org/stable/c/1e0a19912adb68a4b2b74fd77001c96cd83eb073
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-503939.html

01 Record index

CVE-2024-57981

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2024-57981

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References