CVE-2024-58055 – This CVE describes a double-free vulnerability ... (How to Fix)

Q: What is the severity of CVE-2024-58055?

CVE-2024-58055 has a CVSS score of 7.8 (HIGH). This CVE describes a double-free vulnerability in the Linux kernel's USB gadget f_tcm driver. An attacker could potentially cause a kernel crash or execute arbitrary code by exploiting improper memory management during USB storage emulation. Systems using USB gadget functionality with the f_tcm driver are affected.

📋 TL;DR

This CVE describes a double-free vulnerability in the Linux kernel's USB gadget f_tcm driver. An attacker could potentially cause a kernel crash or execute arbitrary code by exploiting improper memory management during USB storage emulation. Systems using USB gadget functionality with the f_tcm driver are affected.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE, but patches exist in stable kernel trees.

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ✅ No

Notes: Only vulnerable if USB gadget functionality with f_tcm driver is enabled and in use.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash, or potential arbitrary code execution with kernel privileges resulting in complete system compromise.

🟠

Likely Case

System instability, kernel crashes, or denial of service affecting USB gadget functionality.

🟢

If Mitigated

Limited impact if USB gadget functionality is disabled or not in use.

🌐 Internet-Facing: LOW - Requires local access or USB device interaction.

🏢 Internal Only: MEDIUM - Requires physical USB access or local user privileges to trigger.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access or ability to interact with USB gadget interface. Memory corruption vulnerabilities can be challenging to exploit reliably.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patches available in stable kernel trees (see references)

Vendor Advisory: https://git.kernel.org/stable/c/16907219ad6763f401700e1b57b2da4f3e07f047

Restart Required: Yes

Instructions:

1. Update to a patched kernel version from your distribution's repositories. 2. Reboot the system to load the new kernel.

🔧 Temporary Workarounds

Disable USB gadget functionality

Linux

If USB gadget functionality is not required, disable it to eliminate the attack surface.

modprobe -r g_tcm
echo 'blacklist g_tcm' > /etc/modprobe.d/disable-g_tcm.conf

🧯 If You Can't Patch

Restrict physical access to USB ports
Implement strict access controls to prevent unauthorized users from interacting with USB gadget interfaces

🔍 How to Verify

Check if Vulnerable:

Check if the f_tcm module is loaded: lsmod | grep tcm

Check Version:

uname -r

Verify Fix Applied:

Check kernel version after update and verify f_tcm module functions without crashes during USB storage operations.

📡 Detection & Monitoring

Log Indicators:

Kernel panic messages
USB-related error messages in dmesg
System crashes during USB operations

Network Indicators:

None - this is a local vulnerability

SIEM Query:

Search for kernel panic events or USB driver error messages in system logs.

📊 Metadata

CVE ID: CVE-2024-58055

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-415

EPSS Score: 0.04% exploit probability (10.6th percentile)

Published: March 6, 2025

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2024-58055, you might also want to check these: