CVE-2024-46719: usb: typec: ucsi: Fix null pointer dereference in trace
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Fix null pointer dereference in trace
ucsiregisteraltmode checks ISERR for the alt pointer and treats NULL as valid. When CONFIGTYPECDPALTMODE is not enabled, ucsiregisterdisplayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call typecportregisteraltmode to register DisplayPort alternate mode as a non-controllable mode when CONFIGTYPECDPALTMODE is not enabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46719?
CVE-2024-46719 is classified as a medium severity vulnerability.
How do I fix CVE-2024-46719?
To resolve CVE-2024-46719, update your Linux kernel to a version that includes the patch, such as 5.10.226-1 or 6.1.123-1.
Which versions of the Linux kernel are affected by CVE-2024-46719?
CVE-2024-46719 affects Linux kernel versions prior to 5.4.284, between 5.5 and 5.10.226, between 5.11 and 5.15.167, between 5.16 and 6.1.109, between 6.2 and 6.6.50, and between 6.7 and 6.10.9.
What systems are impacted by CVE-2024-46719?
CVE-2024-46719 impacts systems running vulnerable versions of the Linux kernel where CONFIG_TYPEC_DP_ALTMODE is not enabled.
Is CVE-2024-46719 likely to be exploited remotely?
CVE-2024-46719 does not indicate a direct vector for remote exploitation, but it can create vulnerabilities that may be leveraged under certain conditions.