Vulnerability-Lookup

CNVD-2025-04158

Vulnerability from cnvd - Published: 2025-03-03

Title

Linux Kernel内存破坏漏洞（CNVD-2025-04158）

Description

Linux Kernel是Linux操作系统的核心组件，负责管理系统的资源。 Linux Kernel中的usbtv_video_free()函数存在内存破坏漏洞，该漏洞源于usbtv_video_free()函数中不必要的锁调用，可能导致死锁。攻击者可利用该漏洞导致拒绝服务。

Severity

中

Patch Name

Linux Kernel内存破坏漏洞（CNVD-2025-04158）的补丁

Patch Description

Linux Kernel是Linux操作系统的核心组件，负责管理系统的资源。 Linux Kernel中的usbtv_video_free()函数存在内存破坏漏洞，该漏洞源于usbtv_video_free()函数中不必要的锁调用，可能导致死锁。攻击者可利用该漏洞导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已提供漏洞修复方案，请关注厂商主页更新： https://www.kernel.org

Reference

https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7 https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895

Impacted products

Name
Linux Linux kernel <=6.7

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-27072",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-27072"
    }
  },
  "description": "Linux Kernel\u662fLinux\u64cd\u4f5c\u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u8d1f\u8d23\u7ba1\u7406\u7cfb\u7edf\u7684\u8d44\u6e90\u3002\n\nLinux Kernel\u4e2d\u7684usbtv_video_free()\u51fd\u6570\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eusbtv_video_free()\u51fd\u6570\u4e2d\u4e0d\u5fc5\u8981\u7684\u9501\u8c03\u7528\uff0c\u53ef\u80fd\u5bfc\u81f4\u6b7b\u9501\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u590d\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u66f4\u65b0\uff1a\r\nhttps://www.kernel.org",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-04158",
  "openTime": "2025-03-03",
  "patchDescription": "Linux Kernel\u662fLinux\u64cd\u4f5c\u7cfb\u7edf\u7684\u6838\u5fc3\u7ec4\u4ef6\uff0c\u8d1f\u8d23\u7ba1\u7406\u7cfb\u7edf\u7684\u8d44\u6e90\u3002\r\n\r\nLinux Kernel\u4e2d\u7684usbtv_video_free()\u51fd\u6570\u5b58\u5728\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eusbtv_video_free()\u51fd\u6570\u4e2d\u4e0d\u5fc5\u8981\u7684\u9501\u8c03\u7528\uff0c\u53ef\u80fd\u5bfc\u81f4\u6b7b\u9501\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Linux Kernel\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2025-04158\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Linux Linux kernel \u003c=6.7"
  },
  "referenceLink": "https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9\r\nhttps://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd\r\nhttps://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7\r\nhttps://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf\r\nhttps://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2\r\nhttps://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895",
  "serverity": "\u4e2d",
  "submitTime": "2025-02-26",
  "title": "Linux Kernel\u5185\u5b58\u7834\u574f\u6f0f\u6d1e\uff08CNVD-2025-04158\uff09"
}

CVE-2024-27072 (GCVE-0-2024-27072)

Vulnerability from cvelistv5 – Published: 2024-05-01 13:04 – Updated: 2026-05-12 11:51

Title

media: usbtv: Remove useless locks in usbtv_video_free()

Summary

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtv_video_free() Remove locks calls in usbtv_video_free() because are useless and may led to a deadlock as reported here: https://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000 Also remove usbtv_stop() call since it will be called when unregistering the device. Before 'c838530d230b' this issue would only be noticed if you disconnect while streaming and now it is noticeable even when disconnecting while not streaming. [hverkuil: fix minor spelling mistake in log message]

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-01 18:51 UTC

CWE

CWE-noinfo Not enough information

Assigner

Linux mitre root Scorecard

References

9 references

URL	Tags
https://git.kernel.org/stable/c/4ec4641df57cbdfdc…
https://git.kernel.org/stable/c/d5ed208d04acf0678…
https://git.kernel.org/stable/c/bdd82c47b22a8befd…
https://git.kernel.org/stable/c/dea46e246ef0f98d8…
https://git.kernel.org/stable/c/3e7d82ebb86e94643…
https://git.kernel.org/stable/c/65e6a2773d6551721…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2025…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < 4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9 (git) Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < d5ed208d04acf06781d63d30f9fa991e8d609ebd (git) Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < bdd82c47b22a8befd617b723098b2a41b77373c7 (git) Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < dea46e246ef0f98d89d59a4229157cd9ffb636bf (git) Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < 3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2 (git) Affected: f3d27f34fdd7701e499617d2c1d94480a98f6d07 , < 65e6a2773d655172143cc0b927cdc89549842895 (git)
Linux	Linux	Affected: 3.11 Unaffected: 0 , < 3.11 (semver) Unaffected: 5.10.227 , ≤ 5.10.* (semver) Unaffected: 5.15.168 , ≤ 5.15.* (semver) Unaffected: 6.1.113 , ≤ 6.1.* (semver) Unaffected: 6.6.55 , ≤ 6.6.* (semver) Unaffected: 6.8.2 , ≤ 6.8.* (semver) Unaffected: 6.9 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:54:11.556Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-27072",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-01T18:51:09.728947Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-31T17:05:19.274Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:51:28.272Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/usbtv/usbtv-video.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            },
            {
              "lessThan": "d5ed208d04acf06781d63d30f9fa991e8d609ebd",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            },
            {
              "lessThan": "bdd82c47b22a8befd617b723098b2a41b77373c7",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            },
            {
              "lessThan": "dea46e246ef0f98d89d59a4229157cd9ffb636bf",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            },
            {
              "lessThan": "3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            },
            {
              "lessThan": "65e6a2773d655172143cc0b927cdc89549842895",
              "status": "affected",
              "version": "f3d27f34fdd7701e499617d2c1d94480a98f6d07",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/media/usb/usbtv/usbtv-video.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.11"
            },
            {
              "lessThan": "3.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.227",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.8.*",
              "status": "unaffected",
              "version": "6.8.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.9",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.227",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.113",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.55",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.8.2",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9",
                  "versionStartIncluding": "3.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: usbtv: Remove useless locks in usbtv_video_free()\n\nRemove locks calls in usbtv_video_free() because\nare useless and may led to a deadlock as reported here:\nhttps://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000\nAlso remove usbtv_stop() call since it will be called when\nunregistering the device.\n\nBefore \u0027c838530d230b\u0027 this issue would only be noticed if you\ndisconnect while streaming and now it is noticeable even when\ndisconnecting while not streaming.\n\n\n[hverkuil: fix minor spelling mistake in log message]"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:09:50.763Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9"
        },
        {
          "url": "https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd"
        },
        {
          "url": "https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7"
        },
        {
          "url": "https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf"
        },
        {
          "url": "https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2"
        },
        {
          "url": "https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895"
        }
      ],
      "title": "media: usbtv: Remove useless locks in usbtv_video_free()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-27072",
    "datePublished": "2024-05-01T13:04:34.169Z",
    "dateReserved": "2024-02-19T14:20:24.216Z",
    "dateUpdated": "2026-05-12T11:51:28.272Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2025-04158

CVE-2024-27072 (GCVE-0-2024-27072)

Tags

Sightings

Nomenclature

Related by attack behaviour