CVE-2024-46674 usb: dwc3: st: fix probed platform device ref count on probe error path

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Affect USB Device Drivers in 2024 and 2025 Two vulnerabilities have been reported affecting USB device drivers. CVE-2024-46674, published on September 13, 2024, addresses issues with the reference count of probed platform devices. CVE-2025-37810, published on May 8, 2025, ensures that the event count does not exceed the event buffer length in USB drivers. 3 sources 46