CVE-2024-53083: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: qcom-pmic: init value of hdrlen/txbuflen earlier
If the read of USBPDPHYRXACKNOWLEDGEREG failed, then hdrlen and txbuflen are uninitialized. This commit stops to print uninitialized value and misleading/false data.
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53083?
CVE-2024-53083 is classified as a moderate severity vulnerability in the Linux kernel due to uninitialized values in certain USB operations.
How do I fix CVE-2024-53083?
To mitigate CVE-2024-53083, you should upgrade to the latest version of the Linux kernel where the vulnerability has been addressed.
Which versions of the Linux kernel are affected by CVE-2024-53083?
CVE-2024-53083 affects specific versions of the Linux kernel between 6.5 and 6.6.61, as well as several release candidates of version 6.12.
Can CVE-2024-53083 be exploited remotely?
CVE-2024-53083 does not appear to have a direct remote exploit vector as it involves local USB operations.
Is there a workaround for CVE-2024-53083?
Currently, the recommended approach to protect against CVE-2024-53083 is to apply the available kernel update, as there are no established workarounds.