CVE-2024-53149: usb: typec: ucsi: glink: fix off-by-one in connector_status
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: glink: fix off-by-one in connectorstatus
UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus() callback, fixing Type-C orientation reporting for the third USB-C connector.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53149?
CVE-2024-53149 has a medium severity level due to the off-by-one error in the UCSI connector's index handling.
How do I fix CVE-2024-53149?
To fix CVE-2024-53149, update your Linux kernel to a version later than 6.11.11 and 6.12.2.
What systems are affected by CVE-2024-53149?
CVE-2024-53149 affects Linux kernel versions between 6.10 and 6.11.11 and between 6.12 and 6.12.2.
Is CVE-2024-53149 exploitable remotely?
CVE-2024-53149 is not classified as a remotely exploitable vulnerability, but it can affect local users.
What are the potential impacts of CVE-2024-53149?
The impacts of CVE-2024-53149 include possible unexpected behavior in USB Type-C connections, potentially leading to system instability.