{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-45011",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-45011",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-09-11T15:13:48.969Z",
    "updatedAt": "2026-05-11T20:33:44.038Z",
    "importedAt": "2026-10-24T01:57:16.009Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "char: xillybus: Check USB endpoints when probing device",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nchar: xillybus: Check USB endpoints when probing device\n\nEnsure, as the driver probes the device, that all endpoints that the\ndriver may attempt to access exist and are of the correct type.\n\nAll XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at\naddress 1. This is verified in xillyusb_setup_base_eps().\n\nOn top of that, a XillyUSB device may have additional Bulk OUT\nendpoints. The information about these endpoints' addresses is deduced\nfrom a data structure (the IDT) that the driver fetches from the device\nwhile probing it. These endpoints are checked in setup_channels().\n\nA XillyUSB device never has more than one IN endpoint, as all data\ntowards the host is multiplexed in this single Bulk IN endpoint. This is\nwhy setup_channels() only checks OUT endpoints.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "a53d1202aef122894b6e46116a92174a9123db5d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "25ee8b2908200fc862c0434e5ad483817d50ceda"
            },
            {
              "version": "a53d1202aef122894b6e46116a92174a9123db5d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "4267131278f5cc98f8db31d035d64bdbbfe18658"
            },
            {
              "version": "a53d1202aef122894b6e46116a92174a9123db5d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "5cff754692ad45d5086b75fef8cc3a99c30a1005"
            },
            {
              "version": "a53d1202aef122894b6e46116a92174a9123db5d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "1371d32b95972d39c1e6e4bae8b6d0df1b573731"
            },
            {
              "version": "a53d1202aef122894b6e46116a92174a9123db5d",
              "status": "affected",
              "versionType": "git",
              "lessThan": "2374bf7558de915edc6ec8cb10ec3291dfab9594"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.14",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.14"
            },
            {
              "version": "5.15.166",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.107",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.48",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.10.7",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.10.*"
            },
            {
              "version": "6.11",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}