Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invalid) source caps are advertised * the existing source caps are unregistered * tcpm_register_source_caps() returns with an error as usb_power_delivery_register_capabilities() fails This causes port->partner_source_caps to hold on to the now freed source caps. Reset port->partner_source_caps value to NULL after unregistering existing source caps.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
cfcd544a9974c6b6fb37ca385146e4796dcaf66d to < 4053696594d7235f3638d49a00cf0f289e4b36a3affectedb16abab1fb645c4b7a86c357dc83a48cf21c2795 to < 04c05d50fa79a41582f7bde8a1fd4377ae4a39e5affected230ecdf71a644c9c73e0e6735b33173074ae3f94 to < 6b67b652849faf108a09647c7fde9b179ef24e2baffected230ecdf71a644c9c73e0e6735b33173074ae3f94 to < e7e921918d905544500ca7a95889f898121ba886affected931b5f302d6f7126dbd6879c42d3d6ca580be423affected6.1.91 to < 6.1.95affected6.6.31 to < 6.6.35affected6.8.10 to < 6.9affected
Linux Linux
Default version status: affected
6.9affected0 to < 6.9unaffected6.1.95 to ≤ 6.1.*unaffected6.6.35 to ≤ 6.6.*unaffected6.9.6 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/4053696594d7235f3638d49a00cf0f289e4b36a3 ↗
- https://git.kernel.org/stable/c/04c05d50fa79a41582f7bde8a1fd4377ae4a39e5 ↗
- https://git.kernel.org/stable/c/6b67b652849faf108a09647c7fde9b179ef24e2b ↗
- https://git.kernel.org/stable/c/e7e921918d905544500ca7a95889f898121ba886 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗