CVE-2024-50268: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
First published: Tue Nov 19 2024(Updated: )
In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30). The call tree is: ucsi_cmd() // val comes from simple_attr_write_xsigned() -> ucsi_send_command() -> ucsi_send_command_common() -> ucsi_run_command() // calls ucsi->ops->sync_control() -> ucsi_ccg_sync_control()
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Linux kernel | >=5.6<5.10.230 | |
| Linux Linux kernel | >=5.11<5.15.172 | |
| Linux Linux kernel | >=5.16<6.1.117 | |
| Linux Linux kernel | >=6.2<6.6.61 | |
| Linux Linux kernel | >=6.7<6.11.8 | |
| Linux Linux kernel | =6.12-rc1 | |
| Linux Linux kernel | =6.12-rc2 | |
| Linux Linux kernel | =6.12-rc3 | |
| Linux Linux kernel | =6.12-rc4 | |
| Linux Linux kernel | =6.12-rc5 | |
| Linux Linux kernel | =6.12-rc6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/d76923164705821aa1b01b8d9d1741f20c654ab4
- https://git.kernel.org/stable/c/8f47984b35f3be0cfc652c2ca358d5768ea3456b
- https://git.kernel.org/stable/c/604314ecd682913925980dc955caea2d036eab5f
- https://git.kernel.org/stable/c/69e19774f15e12dda6c6c58001d059e30895009b
- https://git.kernel.org/stable/c/3a2ba841659a0f15102585120dea75d8d5209616
- https://git.kernel.org/stable/c/7dd08a0b4193087976db6b3ee7807de7e8316f96
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/remedy
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/softwarecombine
- agent/tags
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/5.6
- version/linux linux kernel/5.11
- version/linux linux kernel/5.16
- version/linux linux kernel/6.2
- version/linux linux kernel/6.7
- version/linux linux kernel/6.12-rc1
- version/linux linux kernel/6.12-rc2
- version/linux linux kernel/6.12-rc3
- version/linux linux kernel/6.12-rc4
- version/linux linux kernel/6.12-rc5
- version/linux linux kernel/6.12-rc6