Critical Vulnerability in Linux Kernel: USB Type-C UCSI Read Size Overflow
Summary
DEBIAN-CVE-2024-35924: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. Affects linux versions < 6.8.9-1. Fixed in 6.8.9-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of hardware architectures and is known for its stability and performance. This vulnerability specifically affects the USB Type-C UCSI (USB Type-C Connector System Interface) functionality, which is crucial for managing USB Type-C connections and power delivery.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the USB Type-C UCSI implementation, where the read size for MESSAGE_IN regions was not properly limited for UCSI version 1.2. This oversight could lead to buffer overflows when older systems attempt to read larger data sizes intended for UCSI version 2.0. The potential ramifications include system crashes, data corruption, or exploitation by malicious actors to execute arbitrary code.
How To Fix
Minimum fixed version
6.8.9-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit the read size manually in their applications that interact with the UCSI interface, ensuring that they do not exceed the expected limits for UCSI version 1.2. However, the best solution is to apply the patch as soon as possible.
Conclusion
The identified vulnerability in the Linux kernel regarding USB Type-C UCSI read sizes poses significant risks to system integrity and security. Users are strongly encouraged to update their systems to the patched version to mitigate these risks effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a buffer overflow issue in the USB Type-C UCSI implementation of the Linux kernel, affecting how read sizes are handled.
The vulnerability affects Linux kernel versions prior to 6.8.9-1.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
Failure to address this vulnerability could lead to system instability, data loss, or exploitation by attackers, potentially compromising the entire system.
While the best solution is to update, you can implement manual limits on read sizes in applications that use the UCSI interface as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
