{"schema_version":"1.9.0","id":"CVE-2024-27072","published":"2024-05-01T13:04:34.169Z","modified":"2026-08-12T03:51:13.449106776Z","related":["SUSE-SU-2024:1643-1","SUSE-SU-2024:1646-1","SUSE-SU-2024:1870-1","SUSE-SU-2024:2008-1","SUSE-SU-2024:2019-1","SUSE-SU-2024:2190-1","SUSE-SU-2025:20008-1","SUSE-SU-2025:20028-1"],"summary":"media: usbtv: Remove useless locks in usbtv_video_free()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: usbtv: Remove useless locks in usbtv_video_free()\n\nRemove locks calls in usbtv_video_free() because\nare useless and may led to a deadlock as reported here:\nhttps://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000\nAlso remove usbtv_stop() call since it will be called when\nunregistering the device.\n\nBefore 'c838530d230b' this issue would only be noticed if you\ndisconnect while streaming and now it is noticeable even when\ndisconnecting while not streaming.\n\n\n[hverkuil: fix minor spelling mistake in log message]","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"f3d27f34fdd7701e499617d2c1d94480a98f6d07"},{"fixed":"4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9"},{"fixed":"d5ed208d04acf06781d63d30f9fa991e8d609ebd"},{"fixed":"bdd82c47b22a8befd617b723098b2a41b77373c7"},{"fixed":"dea46e246ef0f98d89d59a4229157cd9ffb636bf"},{"fixed":"3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2"},{"fixed":"65e6a2773d655172143cc0b927cdc89549842895"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27072.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.11.0"},{"fixed":"5.10.227"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.168"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.55"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.8.2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27072.json"}}],"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-265688.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3e7d82ebb86e94643bdb30b0b5b077ed27dce1c2"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4ec4641df57cbdfdc51bb4959afcdbcf5003ddb9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bdd82c47b22a8befd617b723098b2a41b77373c7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d5ed208d04acf06781d63d30f9fa991e8d609ebd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27072.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27072"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27072.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}