Vulnerability in Kernel: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read
Summary
GSD-2021-1002346: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read. Affects Kernel versions < 2c71811c963b6c310a29455d521d31a7ea6c5b5e. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Kernel is a critical component of the Linux operating system that manages the communication between hardware and software. It provides essential services and functions for the proper functioning of the system. The usb: typec: tipd module is responsible for handling USB Type-C connections and power delivery. The tps6598x_block_read function within this module is vulnerable to a security issue.
Vulnerability Detail
The vulnerability in the tps6598x_block_read function of the usb: typec: tipd module allows an attacker to exploit the system by triggering a WARN_ON condition. This vulnerability could potentially lead to a denial of service (DoS) attack or privilege escalation. The issue has been fixed in Linux Kernel version v5.15.5 by commit 2c71811c963b6c310a29455d521d31a7ea6c5b5e.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the vulnerability in the Kernel's usb: typec: tipd module can be fixed by updating the Linux Kernel to version v5.15.5 or later. It is important to stay updated with the latest security patches to ensure the system's integrity and protect against potential attacks. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
This vulnerability could potentially be exploited by an attacker to cause a denial of service (DoS) or gain elevated privileges on the system.
At the time of this report, there is no known exploit for this vulnerability.
Yes, this vulnerability can be exploited remotely if the system is exposed to malicious network traffic.
The recommended mitigation is to update the Linux Kernel to the fixed version mentioned in the report.
You can find more information about this vulnerability in the source database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/GSD-2021-1002346.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
