CVE-2024-46719

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46719
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsi_register_altmode checks IS_ERR for the alt pointer and treats NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled, ucsi_register_displayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call typec_port_register_altmode to register DisplayPort alternate mode as a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/8095bf0579ed4906a33f7bec675bfb29b6b16a3b Patch
https://git.kernel.org/stable/c/7e64cabe81c303bdf6fd26b6a09a3289b33bc870 Patch
https://git.kernel.org/stable/c/3aa56313b0de06ce1911950b2cc0c269614a87a9 Patch
https://git.kernel.org/stable/c/b4243c05d7e3db0bdbf9124e6fa59b4ca7c807ae Patch
https://git.kernel.org/stable/c/3b9f2d9301ae67070fe77a0c06758722fd7172b7 Patch
https://git.kernel.org/stable/c/99331fe68a8eaa4097143a33fb0c12d5e5e8e830 Patch
https://git.kernel.org/stable/c/99516f76db48e1a9d54cdfed63c1babcee4e71a5 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

20 Sep 2024, 18:21

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/7e64cabe81c303bdf6fd26b6a09a3289b33bc870 - () https://git.kernel.org/stable/c/7e64cabe81c303bdf6fd26b6a09a3289b33bc870 - Patch
References () https://git.kernel.org/stable/c/3aa56313b0de06ce1911950b2cc0c269614a87a9 - () https://git.kernel.org/stable/c/3aa56313b0de06ce1911950b2cc0c269614a87a9 - Patch
References () https://git.kernel.org/stable/c/b4243c05d7e3db0bdbf9124e6fa59b4ca7c807ae - () https://git.kernel.org/stable/c/b4243c05d7e3db0bdbf9124e6fa59b4ca7c807ae - Patch
References () https://git.kernel.org/stable/c/3b9f2d9301ae67070fe77a0c06758722fd7172b7 - () https://git.kernel.org/stable/c/3b9f2d9301ae67070fe77a0c06758722fd7172b7 - Patch
References () https://git.kernel.org/stable/c/99516f76db48e1a9d54cdfed63c1babcee4e71a5 - () https://git.kernel.org/stable/c/99516f76db48e1a9d54cdfed63c1babcee4e71a5 - Patch
References () https://git.kernel.org/stable/c/8095bf0579ed4906a33f7bec675bfb29b6b16a3b - () https://git.kernel.org/stable/c/8095bf0579ed4906a33f7bec675bfb29b6b16a3b - Patch
References () https://git.kernel.org/stable/c/99331fe68a8eaa4097143a33fb0c12d5e5e8e830 - () https://git.kernel.org/stable/c/99331fe68a8eaa4097143a33fb0c12d5e5e8e830 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5

18 Sep 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-18 07:15

Updated : 2024-09-20 18:21

NVD link : CVE-2024-46719

Mitre link : CVE-2024-46719

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference