{"id":"DEBIAN-CVE-2024-56545","details":"In the Linux kernel, the following vulnerability has been resolved:  HID: hyperv: streamline driver probe to avoid devres issues  It was found that unloading 'hid_hyperv' module results in a devres complaint:   ...  hv_vmbus: unregistering driver hid_hyperv  ------------[ cut here ]------------  WARNING: CPU: 2 PID: 3983 at drivers/base/devres.c:691 devres_release_group+0x1f2/0x2c0  ...  Call Trace:   \u003cTASK\u003e   ? devres_release_group+0x1f2/0x2c0   ? __warn+0xd1/0x1c0   ? devres_release_group+0x1f2/0x2c0   ? report_bug+0x32a/0x3c0   ? handle_bug+0x53/0xa0   ? exc_invalid_op+0x18/0x50   ? asm_exc_invalid_op+0x1a/0x20   ? devres_release_group+0x1f2/0x2c0   ? devres_release_group+0x90/0x2c0   ? rcu_is_watching+0x15/0xb0   ? __pfx_devres_release_group+0x10/0x10   hid_device_remove+0xf5/0x220   device_release_driver_internal+0x371/0x540   ? klist_put+0xf3/0x170   bus_remove_device+0x1f1/0x3f0   device_del+0x33f/0x8c0   ? __pfx_device_del+0x10/0x10   ? cleanup_srcu_struct+0x337/0x500   hid_destroy_device+0xc8/0x130   mousevsc_remove+0xd2/0x1d0 [hid_hyperv]   device_release_driver_internal+0x371/0x540   driver_detach+0xc5/0x180   bus_remove_driver+0x11e/0x2a0   ? __mutex_unlock_slowpath+0x160/0x5e0   vmbus_driver_unregister+0x62/0x2b0 [hv_vmbus]   ...  And the issue seems to be that the corresponding devres group is not allocated. Normally, devres_open_group() is called from __hid_device_probe() but Hyper-V HID driver overrides 'hid_dev-\u003edriver' with 'mousevsc_hid_driver' stub and basically re-implements __hid_device_probe() by calling hid_parse() and hid_hw_start() but not devres_open_group(). hid_device_probe() does not call __hid_device_probe() for it. Later, when the driver is removed, hid_device_remove() calls devres_release_group() as it doesn't check whether hdev-\u003edriver was initially overridden or not.  The issue seems to be related to the commit 62c68e7cee33 (\"HID: ensure timely release of driver-allocated resources\") but the commit itself seems to be correct.  Fix the issue by dropping the 'hid_dev-\u003edriver' override and using hid_register_driver()/hid_unregister_driver() instead. Alternatively, it would have been possible to rely on the default handling but HID_CONNECT_DEFAULT implies HID_CONNECT_HIDRAW and it doesn't seem to work for mousevsc as-is.","modified":"2026-09-15T06:47:27.154309722Z","published":"2024-12-27T14:15:34.270Z","upstream":["CVE-2024-56545"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-56545"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56545.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.12.3-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-56545.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}