CVE-2023-52877
published 2024-05-21CVE-2023-52877: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that…
PriorityP418medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.22%
12.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
It is possible that typec_register_partner() returns ERR_PTR on failure.
When port->partner is an error, a NULL pointer dereference may occur as
shown below.
[91222.095236][ T319] typec port0: failed to register partner (-17)
...
[91225.061491][ T319] Unable to handle kernel NULL pointer dereference
at virtual address 000000000000039f
[91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc
[91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc
[91225.308067][ T319] Call trace:
[91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc
[91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8
[91225.355900][ T319] kthread_worker_fn+0x178/0x58c
[91225.355902][ T319] kthread+0x150/0x200
[91225.355905][ T319] ret_from_fork+0x10/0x30
Add a check for port->partner to avoid dereferencing a NULL pointer.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.64-1 (bookworm) | linux 6.1.64-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 5e1d4c49fbc86dab6e005d66f066bd53c9479cde < e5f53a68a596e04df3fde3099273435a30b6fdac | e5f53a68a596e04df3fde3099273435a30b6fdac |
| linux | linux | >= 5e1d4c49fbc86dab6e005d66f066bd53c9479cde < e7a802447c491903aa7cb45967aa2a934a4e63fc | e7a802447c491903aa7cb45967aa2a934a4e63fc |
| linux | linux | >= 5e1d4c49fbc86dab6e005d66f066bd53c9479cde < 9ee038590d808a95d16adf92818dcd4752273c08 | 9ee038590d808a95d16adf92818dcd4752273c08 |
| linux | linux | >= 5e1d4c49fbc86dab6e005d66f066bd53c9479cde < b37a168c0137156042a0ca9626651b5a789e822b | b37a168c0137156042a0ca9626651b5a789e822b |
| linux | linux | >= 5e1d4c49fbc86dab6e005d66f066bd53c9479cde < 4987daf86c152ff882d51572d154ad12e4ff3a4b | 4987daf86c152ff882d51572d154ad12e4ff3a4b |
| linux | linux_kernel | >= 0 < 6.1.64-1 | 6.1.64-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 0 < 6.6.8-1 | 6.6.8-1 |
| linux | linux_kernel | >= 5.12 < 5.15.138 | 5.15.138 |
| linux | linux_kernel | >= 5.16 < 6.1.62 | 6.1.62 |
| linux | linux_kernel | >= 6.2 < 6.5.11 | 6.5.11 |
| linux | linux_kernel | >= 6.6 < 6.6.1 | 6.6.1 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
vendor_redhat·2024-05-21·CVSS 5.5
CVE-2023-52877 [MEDIUM] CWE-476 kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
kernel: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
It is possible that typec_register_partner() returns ERR_PTR on failure.
When port->partner is an error, a NULL pointer dereference may occur as
shown below.
[91222.095236][ T319] typec port0: failed to register partner (-17)
...
[91225.061491][ T319] Unable to handle kernel NULL pointer dereference
at virtual address 000000000000039f
[91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc
[91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc
[91225.308067][ T319] Call trace:
[91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc
[91225.308073][ T319] tcpm_pd_rx_handler+0x1
Debian
CVE-2023-52877: linux - In the Linux kernel, the following vulnerability has been resolved: usb: typec:...
vendor_debian·2023·CVSS 5.5
CVE-2023-52877 [MEDIUM] CVE-2023-52877: linux - In the Linux kernel, the following vulnerability has been resolved: usb: typec:...
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902
OSV
CVE-2023-52877: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible th
osv·2024-05-21·CVSS 5.5
CVE-2023-52877 [MEDIUM] CVE-2023-52877: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible th
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902
GHSA
GHSA-7rxw-gv4w-f8w6: In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
It is possible
ghsa_unreviewed·2024-05-21
CVE-2023-52877 [MEDIUM] CWE-476 GHSA-7rxw-gv4w-f8w6: In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
It is possible
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
It is possible that typec_register_partner() returns ERR_PTR on failure.
When port->partner is an error, a NULL pointer dereference may occur as
shown below.
[91222.095236][ T319] typec port0: failed to register partner (-17)
...
[91225.061491][ T319] Unable to handle kernel NULL pointer dereference
at virtual address 000000000000039f
[91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc
[91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc
[91225.308067][ T319] Call trace:
[91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc
[91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8
[91225.355900][ T319] kthread_worker_fn+0x178/0x58c
[91225.355
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4bhttps://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822bhttps://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdachttps://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fchttps://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4bhttps://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822bhttps://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdachttps://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc
2024-05-21
Published