- 5.5MediumCVSS base score
- 0.29%Exploitation in 30 daysEPSS · top 78% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver was taking too long, and the driver's immediate resubmission of interrupt URBs with -EPROTO status combined with the dummy-hcd emulation to cause a CPU lockup: cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor782:6625] CPU#0 Utilization every 4s during lockup: #1: 98% system, 0% softirq, 3% hardirq, 0% idle #2: 98% system, 0% softirq, 3% hardirq, 0% idle #3: 98% system, 0% softirq, 3% hardirq, 0% idle #4: 98% system, 0% softirq, 3% hardirq, 0% idle #5: 98% system, 1% softirq, 3% hardirq, 0% idle Modules linked in: irq event stamp: 73096 hardirqs last enabled at (73095): [<ffff80008037bc00>] console_emit_next_record kernel/printk/printk.c:2935 [inline] hardirqs last enabled at (73095): [<ffff80008037bc00>] console_flush_all+0x650/0xb74 kernel/printk/printk.c:2994 hardirqs last disabled at (73096): [<ffff80008af10b00>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline] hardirqs last disabled at (73096): [<ffff80008af10b00>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551 softirqs last enabled at (73048): [<ffff8000801ea530>] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (73048): [<ffff8000801ea530>] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582 softirqs last disabled at (73043): [<ffff800080020de8>] __do_softirq+0x14/0x20 kernel/softirq.c:588 CPU: 0 PID: 6625 Comm: syz-executor782 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Testing showed that the problem did not occur if the two error messages -- the first two lines above -- were removed; apparently adding material to the kernel log takes a surprisingly large amount of time. In any case, the best approach for preventing these lockups and to avoid spamming the log with thousands of error messages per second is to ratelimit the two dev_err() calls. Therefore we replace them with dev_err_ratelimited().
Timeline
ID reserved
By Linux
Published
- 22 months later
· 22 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.29% · top 78% of all CVEs (11 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.
Affected products
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 217d1f44fff560b3995a685a60aa66e55a7f0f56
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 05b2cd6d33f700597e6f081b53c668a226a96d28
- affected 9908a32e94de2141463e104c9924279ed3509447 – < c0747d76eb05542b5d49f67069b64ef5ff732c6c
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 53250b54c92fe087fd4b0c48f85529efe1ebd879
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 02a4c0499fc3a02e992b4c69a9809912af372d94
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 72a3fe36cf9f0d030865e571f45a40f9c1e07e8a
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 82075aff7ffccb1e72b0ac8aa349e473624d857c
- affected 9908a32e94de2141463e104c9924279ed3509447 – < 22f00812862564b314784167a89f27b444f82a46
- affected 2.6.28
- unaffected < 2.6.28
- unaffected 4.19.317 – ≤ 4.19.*
- unaffected 5.4.279 – ≤ 5.4.*
- unaffected 5.10.221 – ≤ 5.10.*
- unaffected 5.15.162 – ≤ 5.15.*
- unaffected 6.1.95 – ≤ 6.1.*
- unaffected 6.6.35 – ≤ 6.6.*
- unaffected 6.9.6 – ≤ 6.9.*
- unaffected 6.10 – ≤ *
References
References9
- https://git.kernel.org/stable/c/217d1f44fff560b3995a685a60aa66e55a7f0f56 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/05b2cd6d33f700597e6f081b53c668a226a96d28 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/c0747d76eb05542b5d49f67069b64ef5ff732c6c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/53250b54c92fe087fd4b0c48f85529efe1ebd879 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/02a4c0499fc3a02e992b4c69a9809912af372d94 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/72a3fe36cf9f0d030865e571f45a40f9c1e07e8a (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/82075aff7ffccb1e72b0ac8aa349e473624d857c (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/22f00812862564b314784167a89f27b444f82a46 (opens in a new tab)x_transferred
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-38715 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-40904)Record last updated .