Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40903
HistoryJul 12, 2024 - 12:20 p.m.

CVE-2024-40903 usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

2024-07-1212:20:44
Linux
github.com
1
linux kernel
usb
type-c
tcpm
vulnerability

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

There could be a potential use-after-free case in
tcpm_register_source_caps(). This could happen when:

  • new (say invalid) source caps are advertised
  • the existing source caps are unregistered
  • tcpm_register_source_caps() returns with an error as
    usb_power_delivery_register_capabilities() fails

This causes port->partner_source_caps to hold on to the now freed source
caps.

Reset port->partner_source_caps value to NULL after unregistering
existing source caps.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial