CVE-2024-53149

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53149
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Correct the condition in the pmic_glink_ucsi_connector_status() callback, fixing Type-C orientation reporting for the third USB-C connector.

4.6 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca Patch
https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5 Patch
https://git.kernel.org/stable/c/8a2273e5c1beb285729aa001422967b4711c53fe
https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jan 2025, 16:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/8a2273e5c1beb285729aa001422967b4711c53fe -

07 Jan 2025, 16:36

Type Values Removed Values Added
CWE CWE-193
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.6
References () https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca - () https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca - Patch
References () https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5 - () https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5 - Patch
References () https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2 - () https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2 - Patch
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: usb: typec: ucsi: glink: fix off-by-one in Connector_status Los índices del conector UCSI comienzan desde 1 hasta 3, PMIC_GLINK_MAX_PORTS. Corrija la condición en la devolución de llamada pmic_glink_ucsi_connector_status(), arreglando el informe de orientación tipo C para el tercer conector USB-C.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

24 Dec 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-24 12:15

Updated : 2025-01-09 16:16

NVD link : CVE-2024-53149

Mitre link : CVE-2024-53149

CVE.ORG link : CVE-2024-53149

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-193

Off-by-one Error