NetSight
IP …
medium5.5

CVE-2024-46719

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_altmode checks IS_ERR…

Impact

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_altmode checks IS_ERR for the alt pointer and treats NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled, ucsi_register_displayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call typec_port_register_altmode to register DisplayPort alternate mode as a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 5.4.284
from 5.5 before 5.10.226
from 5.11 before 5.15.167
from 5.16 before 6.1.109
from 6.2 before 6.6.50
from 6.7 before 6.10.9

Weakness classification

CWE-476

References