CVE-2024-40903

usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

published July 12, 2024

CVSS
—
EPSS
0%
Percentile
19.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

There could be a potential use-after-free case in

tcpm_register_source_caps(). This could happen when:

* new (say invalid) source caps are advertised

* the existing source caps are unregistered

* tcpm_register_source_caps() returns with an error as

usb_power_delivery_register_capabilities() fails

This causes port->partner_source_caps to hold on to the now freed source

caps.

Reset port->partner_source_caps value to NULL after unregistering

existing source caps.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00284 · 19.8th percentile
Published
2024-07-12T12:20Z
EPSS history
Timeline
  • 12 JUL 12:20Z
    usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
    cvelistv5