CVE-2024-46674

A flaw was found in the Linux kernel, specifically within the USB DWC3 ST driver. This vulnerability arises from an error in how the driver handles device setup failures, leading to an incorrect count of device references. If a setup error occurs, resources might be released prematurely, creating a use-after-free condition. A local attacker with low privileges could exploit this to cause system instability or potentially gain elevated access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.