USB Type-C TIPD Vulnerability in Linux Kernel
Summary
UVI-2021-1002272: usb: typec: tipd: Remove WARN_ON in tps6598x_block_read. Affects Kernel versions < 30dcfcda8992dc42f18e7d35b6a1fa72372d382d. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality and interfaces for hardware devices, including USB Type-C connectors. USB Type-C TIPD (Type-C Interface Power Delivery) is a component within the Linux Kernel that handles power delivery negotiation and control for Type-C devices. It interacts with the TPS6598x USB Type-C and USB PD Controller driver.
The vulnerability identified in the TIPD component of the Linux Kernel allows for potential security risks. This vulnerability has been assigned the ID UVI-2021-1002272.
Vulnerability Detail
The vulnerability in the TIPD component of the Linux Kernel arises from the presence of a WARN_ON statement in the tps6598x_block_read function. The WARN_ON statement triggers a warning message if a specific condition is met during the execution of the function. However, this warning message can be exploited by an attacker to cause a denial-of-service (DoS) attack or potentially execute arbitrary code.
The impact and attack plausibility of this vulnerability have not been proven, but it is essential to address it to ensure the security and stability of systems running the affected Linux Kernel versions.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the fix by updating the Linux Kernel to the recommended version.
Conclusion
The USB Type-C TIPD vulnerability in the Linux Kernel poses potential security risks and should be addressed by updating the kernel to version v5.4.162 or later. It is important to stay vigilant and apply security patches promptly to ensure the integrity and stability of systems. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability is not yet proven, but it has the potential to lead to a denial-of-service (DoS) attack or arbitrary code execution.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will provide real-time monitoring and alerts for open-source vulnerabilities, including this one.
There is no known exploit for this vulnerability at the moment. However, it is crucial to apply the recommended fix to mitigate any potential risks.
The vulnerability is present in Linux Kernel versions prior to v5.4.162. It is recommended to update to the patched version to eliminate the vulnerability.
You can refer to the vulnerability details in the VulnDB database: https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1002xxx/UVI-2021-1002272.json
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
