Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-35924

usb: typec: ucsi: Limit read size on v1.2

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI version to truncate read sizes on UCSI v1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • bdc62f2bae8fb0e8e99574de5232f0a3c54a27df to < af9bdf05557dc21040df2f11062133dd1e503a09affected
  • bdc62f2bae8fb0e8e99574de5232f0a3c54a27df to < 266f403ec47573046dee4bcebda82777ce702c40affected
  • bdc62f2bae8fb0e8e99574de5232f0a3c54a27df to < 0defcaa09d3b21e8387829ee3a652c43fa91e13faffected
  • bdc62f2bae8fb0e8e99574de5232f0a3c54a27df to < b3db266fb031fba88c423d4bb8983a73a3db6527affected

Linux Linux

Default version status: affected

  • 5.5affected
  • 0 to < 5.5unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.27 to ≤ 6.6.*unaffected
  • 6.8.6 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References