CVE-2025-38391
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implemented DisplayPort Alt Mode port partner can indicate that its pin assignment capabilities are greater than the maximum value, DP_PIN_ASSIGN_F. In this case, calls to pin_assignment_show will cause a BRK exception due to an out of bounds array access. Prevent for loop in pin_assignment_show from accessing invalid values in pin_assignments by adding DP_PIN_ASSIGN_MAX value in typec_dp.h and using i < DP_PIN_ASSIGN_MAX as a loop condition.
How to fix
- linux linux_kernel5.4.296, 5.10.240, 5.15.187, 6.1.144, 6.6.97, 6.12.37, 6.15.6 or later
- git.kernel.org/stable/c/114a977e0f6bf278e05eade055e13fc271f69cf7
- git.kernel.org/stable/c/2f535517b5611b7221ed478527e4b58e29536ddf
- git.kernel.org/stable/c/45e9444b3b97eaf51a5024f1fea92f44f39b50c6
- git.kernel.org/stable/c/47cb5d26f61d80c805d7de4106451153779297a1
- git.kernel.org/stable/c/5581e694d3a1c2f32c5a51d745c55b107644e1f8
- git.kernel.org/stable/c/621d5a3ef0231ab242f2d31eecec40c38ca609c5
- git.kernel.org/stable/c/af4db5a35a4ef7a68046883bfd12468007db38f1
- git.kernel.org/stable/c/c93bc959788ed9a1af7df57cb539837bdf790cee
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.19 ≤ v < 5.4.296, 5.5 ≤ v < 5.10.240, 5.11 ≤ v < 5.15.187, 5.16 ≤ v < 6.1.144, 6.2 ≤ v < 6.6.97, 6.7 ≤ v < 6.12.37, 6.13 ≤ v < 6.15.6, 6.16 | 5.4.296, 5.10.240, 5.15.187, 6.1.144, 6.6.97, 6.12.37, 6.15.6 |
| debian debian_linux | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.