In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: streamline driver probe to avoid devres issues It was found that… (CVE-2024-56545)
A vulnerability in the Linux kernel's Hyper-V HID driver (hid_hyperv) caused a devres resource management warning and potential instability when unloading the module. This issue arises because the driver overrides the standard probe function, skipping a necessary resource allocation call, leading to a devres release on an unallocated group. The problem has been fixed by removing the driver override and using standard registration functions.
AI Analysis
Technical Summary
The Linux kernel hid_hyperv driver improperly overrides the 'hid_dev->driver' field and reimplements the probe function without calling devres_open_group(), which allocates a devres group. When unloading the hid_hyperv module, hid_device_remove() calls devres_release_group() without verifying if the group was allocated, causing a devres complaint and kernel warning. The root cause is the driver bypassing the standard __hid_device_probe() function. The fix involves dropping the driver override and using hid_register_driver()/hid_unregister_driver() to ensure proper resource management.
Potential Impact
This vulnerability leads to kernel warnings and potential instability during the unloading of the hid_hyperv module due to improper resource management. It does not impact confidentiality or integrity but causes availability issues (kernel warnings and possible crashes).
Mitigation Recommendations
A fix is available that addresses the issue by removing the driver override and using the standard HID driver registration functions. Users should apply the updated Linux kernel version containing this fix. No additional mitigation steps are required beyond applying the patch.
In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: streamline driver probe to avoid devres issues It was found that… (CVE-2024-56545)
Description
A vulnerability in the Linux kernel's Hyper-V HID driver (hid_hyperv) caused a devres resource management warning and potential instability when unloading the module. This issue arises because the driver overrides the standard probe function, skipping a necessary resource allocation call, leading to a devres release on an unallocated group. The problem has been fixed by removing the driver override and using standard registration functions.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel hid_hyperv driver improperly overrides the 'hid_dev->driver' field and reimplements the probe function without calling devres_open_group(), which allocates a devres group. When unloading the hid_hyperv module, hid_device_remove() calls devres_release_group() without verifying if the group was allocated, causing a devres complaint and kernel warning. The root cause is the driver bypassing the standard __hid_device_probe() function. The fix involves dropping the driver override and using hid_register_driver()/hid_unregister_driver() to ensure proper resource management.
Potential Impact
This vulnerability leads to kernel warnings and potential instability during the unloading of the hid_hyperv module due to improper resource management. It does not impact confidentiality or integrity but causes availability issues (kernel warnings and possible crashes).
Mitigation Recommendations
A fix is available that addresses the issue by removing the driver override and using the standard HID driver registration functions. Users should apply the updated Linux kernel version containing this fix. No additional mitigation steps are required beyond applying the patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-r47r-3q5h-27v7
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2024-56545"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6ac13969a43b0b3b89d5fbb1
Added to database: 10/03/2026, 17:20:41 UTC
Last enriched: 10/03/2026, 17:23:56 UTC
Last updated: 10/04/2026, 02:45:59 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.