CVE-2023-54299 — NULL Pointer Dereference in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: bus: verify partner exists in typec_altmode_attention
Some usb hubs will negotiate DisplayPort Alt mode with the device
but will then negotiate a data role swap after entering the alt
mode. The data role swap causes the device to unregister all alt
modes, however the usb hub will still send Attention messages
even after failing to reregister the Alt Mode. type_altmode_attention
currently does not verify whether or …
Affected Packages4 packages
▶CVEListV5linux/linux8a37d87d72f0c69f837229c04d2fcd7117ea57e7 — 5f71716772b88cbe0e1788f6a38d7871aff2120b+7
🔴Vulnerability Details
3OSV▶
CVE-2023-54299: In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_altmode_attention Some usb hubs wi↗2025-12-30
GHSA▶
GHSA-4784-9v76-jqjx: In the Linux kernel, the following vulnerability has been resolved:
usb: typec: bus: verify partner exists in typec_altmode_attention
Some usb hubs↗2025-12-30