Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdm_consume_identity() or svdm_consume_identity_sop_prime() as the device-controlled value could index off of the static arrays, which could leak data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
f0690a25a140b853b1842fa80faf828601bb47e8 to < 150c30131c032b4b1ad9acd29f2834321d85ae4baffectedf0690a25a140b853b1842fa80faf828601bb47e8 to < 6bacd22e1eae77abf089bbdc016270200a8dc83baffectedf0690a25a140b853b1842fa80faf828601bb47e8 to < 569f7971542eb10025d8a0989b83f28a29d8ba20affectedf0690a25a140b853b1842fa80faf828601bb47e8 to < f9d787fbe83127105e42088cca40e5118db0d810affectedf0690a25a140b853b1842fa80faf828601bb47e8 to < ed8649f3822e211d025bcab5158af6f8a38c8705affectedf0690a25a140b853b1842fa80faf828601bb47e8 to < 8fbc349e8383125dd2d8de1c1e926279d398ab17affected
Linux Linux
Default version status: affected
4.12affected0 to < 4.12unaffected6.1.191 to ≤ 6.1.*unaffected6.6.160 to ≤ 6.6.*unaffected6.12.93 to ≤ 6.12.*unaffected6.18.35 to ≤ 6.18.*unaffected7.0.12 to ≤ 7.0.*unaffected7.1 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/150c30131c032b4b1ad9acd29f2834321d85ae4b ↗
- https://git.kernel.org/stable/c/6bacd22e1eae77abf089bbdc016270200a8dc83b ↗
- https://git.kernel.org/stable/c/569f7971542eb10025d8a0989b83f28a29d8ba20 ↗
- https://git.kernel.org/stable/c/f9d787fbe83127105e42088cca40e5118db0d810 ↗
- https://git.kernel.org/stable/c/ed8649f3822e211d025bcab5158af6f8a38c8705 ↗
- https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17 ↗