CVE-2023-52938
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 9222912924fcf56e2d166a503eddbdb5ffd2005f < fdd11d7136fd070b3a74d6d8799d9eac28a57fc5 | affected |
| Linux | Linux | e0dced9c7d4763fd97c86a13902d135f03cc42eb < f82060da749c611ed427523b6d1605d87338aac1 | affected |
| Linux | Linux | 160416b397c362e37b590040a089604dd1f37de1 | affected |
| Linux | Linux | 6.0.15 < 6.1 | affected |
| Linux | Linux | 6.1.1 < 6.1.11 | affected |
Weaknesses
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://git.kernel.org/stable/c/fdd11d7136fd070b3a74d6d8799d9eac28a57fc5
- https://git.kernel.org/stable/c/f82060da749c611ed427523b6d1605d87338aac1
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.