CVE-2023-52938
published 2025-03-27CVE-2023-52938: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null…
PriorityP417medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
10.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will fix null pointer dereference that was caused by
the driver attempting to resume ports that were not yet
registered.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.11-1 (bookworm) | linux 6.1.11-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 6.0.15 < 6.1 | 6.1 |
| linux | linux | >= 6.1.1 < 6.1.11 | 6.1.11 |
| linux | linux | >= 9222912924fcf56e2d166a503eddbdb5ffd2005f < fdd11d7136fd070b3a74d6d8799d9eac28a57fc5 | fdd11d7136fd070b3a74d6d8799d9eac28a57fc5 |
| linux | linux | >= e0dced9c7d4763fd97c86a13902d135f03cc42eb < f82060da749c611ed427523b6d1605d87338aac1 | f82060da749c611ed427523b6d1605d87338aac1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 0 < 6.1.11-1 | 6.1.11-1 |
| linux | linux_kernel | >= 6.0.15 < 6.1 | 6.1 |
| linux | linux_kernel | >= 6.1.1 < 6.1.11 | 6.1.11 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: usb: typec: ucsi: Don't attempt to resume the ports before they exist
vendor_redhat·2025-03-27·CVSS 5.5
CVE-2023-52938 [MEDIUM] CWE-476 kernel: usb: typec: ucsi: Don't attempt to resume the ports before they exist
kernel: usb: typec: ucsi: Don't attempt to resume the ports before they exist
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will fix null pointer dereference that was caused by
the driver attempting to resume ports that were not yet
registered.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 7) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 8) - Out of support scope
Package: kernel-rt (Red Hat Enterprise Linux 9) - Fix deferred
Debian
CVE-2023-52938: linux - In the Linux kernel, the following vulnerability has been resolved: usb: typec:...
vendor_debian·2023·CVSS 5.5
CVE-2023-52938 [MEDIUM] CVE-2023-52938: linux - In the Linux kernel, the following vulnerability has been resolved: usb: typec:...
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered.
Scope: local
bookworm: resolved (fixed in 6.1.11-1)
bullseye: resolved
forky: resolved (fixed in 6.1.11-1)
sid: resolved (fixed in 6.1.11-1)
trixie: resolved (fixed in 6.1.11-1)
GHSA
GHSA-6gh5-4fvc-rw6c: In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will
ghsa_unreviewed·2025-03-27
CVE-2023-52938 [MEDIUM] CWE-476 GHSA-6gh5-4fvc-rw6c: In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will fix null pointer dereference that was caused by
the driver attempting to resume ports that were not yet
registered.
OSV
CVE-2023-52938: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fi
osv·2025-03-27·CVSS 5.5
CVE-2023-52938 [MEDIUM] CVE-2023-52938: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fi
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered.
No detection rules found.
No public exploits indexed.
2025-03-27
Published