Off-by-One Error in USB-C Connector Status Reporting in Linux Kernel
Summary
DEBIAN-CVE-2024-53149: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Affects linux versions < 6.12.3-1. Fixed in 6.12.3-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interaction. It is responsible for managing system resources and facilitating communication between hardware devices and applications. This vulnerability affects the USB Type-C connector status reporting, specifically in the UCSI (USB Type-C Connector System Software Interface) implementation, which is crucial for managing USB-C connections and ensuring proper device functionality.
Vulnerability Detail
In the Linux kernel, an off-by-one error was identified in the UCSI connector's status reporting. The indices for UCSI connectors range from 1 to 3, corresponding to the maximum number of ports defined by PMIC_GLINK_MAX_PORTS. The error in the pmic_glink_ucsi_connector_status() callback led to incorrect Type-C orientation reporting for the third USB-C connector. This vulnerability could result in improper device behavior, affecting connectivity and functionality of USB-C devices.
How To Fix
Minimum fixed version
6.12.3-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As of now, no specific workarounds have been provided for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate any potential risks.
Conclusion
The off-by-one error in the USB-C connector status reporting within the Linux kernel represents a significant vulnerability that can impact device functionality. It is crucial for users to update their systems to the patched version 6.12.3-1 to ensure proper operation of USB-C devices and mitigate any risks associated with this vulnerability.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an off-by-one error in the USB-C connector status reporting within the Linux kernel, affecting the accuracy of device orientation reporting.
The vulnerability affects all versions prior to 6.12.3-1 in both Debian 13 and 14.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to use the Vulert playground without signup.
If exploited, this vulnerability could lead to incorrect USB-C device behavior, potentially causing connectivity issues and affecting the functionality of connected devices.
The patch for this vulnerability has been released in version 6.12.3-1, which is available for installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
