CVE-2024-40903: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps
There could be a potential use-after-free case in tcpmregistersourcecaps(). This could happen when: new (say invalid) source caps are advertised the existing source caps are unregistered tcpmregistersourcecaps() returns with an error as usbpowerdeliveryregistercapabilities() fails
This causes port->partnersourcecaps to hold on to the now freed source caps.
Reset port->partnersourcecaps value to NULL after unregistering existing source caps.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-40903?
CVE-2024-40903 has a high severity rating due to the potential for a use-after-free vulnerability in the Linux kernel.
What systems are affected by CVE-2024-40903?
CVE-2024-40903 affects multiple versions of the Linux kernel, specifically those before versions 6.1.95, 6.6.35, 6.9.6, and 6.10.
How do I fix CVE-2024-40903?
To fix CVE-2024-40903, upgrade to a patched version of the Linux kernel, specifically versions 6.1.95, 6.6.35, 6.9.6, or 6.10.
What is the nature of the vulnerability in CVE-2024-40903?
The vulnerability in CVE-2024-40903 is a use-after-free issue that occurs in the function tcpm_register_source_caps.
Is there a workaround for CVE-2024-40903?
There are no recommended workarounds for CVE-2024-40903; patching the kernel is the advised solution.