Answer in brief
CVE-2024-43883 records a Unknown severity vulnerability in usb: vhci-hcd: Do not drop references before new references are gained. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2024-43883 records a Unknown severity vulnerability in usb: vhci-hcd: Do not drop references before new references are gained. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <5a3c473b28ae1c1f7c4dc129e30cb19ae6e96f89 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <9c3746ce8d8fcb3a2405644fc0eec7fc5312de80 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <4dacdb9720aaab10b6be121eae55820174d97174 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <e8c1e606dab8c56cf074b43b98d0805de7322ba2 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <585e6bc7d0a9bf73a8be3d3fb34e86b90cc61a14 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <128e82e41cf7d74a562726c1587d9d2ede1a0a37 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <c3d0857b7fc2c49f68f89128a5440176089a8f54 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <afdcfd3d6fcdeca2735ca8d994c5f2d24a368f0a || 96ea4801d2035f89fc4ec4a67f49a18c35cb6715 || 075b4e6a982d38121250c090f7b9294314ac1b19 || 436e52f1a628233f080605dd736594df250897ca || 1c8d316294916da7e2a2f1f178ca3f3bd6d7b531 || 927c3fa44e24300eb827ab9f9dacce6dff9c9bb7 || >=2.6.32.30 <2.6.33 || >=2.6.33.8 <2.6.34 || >=2.6.34.10 <2.6.35 || >=2.6.35.12 <2.6.36 || >=2.6.37.3 <2.6.38 | 5a3c473b28ae1c1f7c4dc129e30cb19ae6e96f89, 9c3746ce8d8fcb3a2405644fc0eec7fc5312de80, 4dacdb9720aaab10b6be121eae55820174d97174, e8c1e606dab8c56cf074b43b98d0805de7322ba2, 585e6bc7d0a9bf73a8be3d3fb34e86b90cc61a14, 128e82e41cf7d74a562726c1587d9d2ede1a0a37, c3d0857b7fc2c49f68f89128a5440176089a8f54, afdcfd3d6fcdeca2735ca8d994c5f2d24a368f0a, 2.6.33, 2.6.34, 2.6.35, 2.6.36, 2.6.38 |
| Linux/Linuxgeneric | 2.6.38 | Not reported |
Published upstream
Aug 23, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. This strictly speaking closes ZDI-CAN-22273, though there may be similar races in the driver.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <5a3c473b28ae1c1f7c4dc129e30cb19ae6e96f89 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <9c3746ce8d8fcb3a2405644fc0eec7fc5312de80 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <4dacdb9720aaab10b6be121eae55820174d97174 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <e8c1e606dab8c56cf074b43b98d0805de7322ba2 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <585e6bc7d0a9bf73a8be3d3fb34e86b90cc61a14 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <128e82e41cf7d74a562726c1587d9d2ede1a0a37 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <c3d0857b7fc2c49f68f89128a5440176089a8f54 || >=7606ee8aa33287dd3e6eb44c78541b87a413a325 <afdcfd3d6fcdeca2735ca8d994c5f2d24a368f0a || 96ea4801d2035f89fc4ec4a67f49a18c35cb6715 || 075b4e6a982d38121250c090f7b9294314ac1b19 || 436e52f1a628233f080605dd736594df250897ca || 1c8d316294916da7e2a2f1f178ca3f3bd6d7b531 || 927c3fa44e24300eb827ab9f9dacce6dff9c9bb7 || >=2.6.32.30 <2.6.33 || >=2.6.33.8 <2.6.34 || >=2.6.34.10 <2.6.35 || >=2.6.35.12 <2.6.36 || >=2.6.37.3 <2.6.38 | 5a3c473b28ae1c1f7c4dc129e30cb19ae6e96f89, 9c3746ce8d8fcb3a2405644fc0eec7fc5312de80, 4dacdb9720aaab10b6be121eae55820174d97174, e8c1e606dab8c56cf074b43b98d0805de7322ba2, 585e6bc7d0a9bf73a8be3d3fb34e86b90cc61a14, 128e82e41cf7d74a562726c1587d9d2ede1a0a37, c3d0857b7fc2c49f68f89128a5440176089a8f54, afdcfd3d6fcdeca2735ca8d994c5f2d24a368f0a, 2.6.33, 2.6.34, 2.6.35, 2.6.36, 2.6.38 |
| Linux/Linuxgeneric | 2.6.38 | Not reported |
Published upstream
Aug 23, 2024
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: usb: vhci-hcd: Do not drop references before new references are gained At a few places the driver carries stale pointers to references that can still be used. Make sure that does not happen. This strictly speaking closes ZDI-CAN-22273, though there may be similar races in the driver.
Quoted source text, attributed separately from HOL analysis.