CVE-2023-54299
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_altmode_attention Some usb hubs will negotiate DisplayPort Alt mode with the device but will then negotiate a data role swap after entering the alt mode. The data role swap causes the device to unregister all alt modes, however the usb hub will still send Attention messages even after failing to reregister the Alt Mode. type_altmode_attention currently does not verify whether or not a device's altmode partner exists, which results in a NULL pointer error when dereferencing the typec_altmode and typec_altmode_ops belonging to the altmode partner. Verify the presence of a device's altmode partner before sending the Attention message to the Alt Mode driver.
How to fix
- Linux Linux5f71716772b88cbe0e1788f6a38d7871aff2120b, 38e1f2ee82bacbbfded8f1c06794a443d038d054, 0ad6bad31da692f8d7acacab07eabe7586239ae0, 0d3b5fe47938e9c451466845304a2bd74e967a80, d49547950bf7f3480d6ca05fe055978e5f0d9e5b, 1101867a1711c27d8bbe0e83136bec47f8c1ca2a, f23643306430f86e2f413ee2b986e0773e79da31 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < 5f71716772b88cbe0e1788f6a38d7871aff2120b, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < 38e1f2ee82bacbbfded8f1c06794a443d038d054, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < 0ad6bad31da692f8d7acacab07eabe7586239ae0, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < 0d3b5fe47938e9c451466845304a2bd74e967a80, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < d49547950bf7f3480d6ca05fe055978e5f0d9e5b, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < 1101867a1711c27d8bbe0e83136bec47f8c1ca2a, 8a37d87d72f0c69f837229c04d2fcd7117ea57e7 ≤ v < f23643306430f86e2f413ee2b986e0773e79da31, 4.19 | 5f71716772b88cbe0e1788f6a38d7871aff2120b, 38e1f2ee82bacbbfded8f1c06794a443d038d054, 0ad6bad31da692f8d7acacab07eabe7586239ae0, 0d3b5fe47938e9c451466845304a2bd74e967a80, d49547950bf7f3480d6ca05fe055978e5f0d9e5b, 1101867a1711c27d8bbe0e83136bec47f8c1ca2a, f23643306430f86e2f413ee2b986e0773e79da31 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.