CVE-2024-53203 usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

🗓️ 27 Dec 2024 13:49:49Reported by LinuxType

Fix for potential array underflow in ucsi_ccg_sync_control in Linux kernel USB Type-C handling.

Reporter	Title	Published	Views	Family All 168
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of the ucsi_ccg_sync_control() function in the Linux kernel’s driver/us module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Jun 202500:00	–	bdu_fstec
CBLMariner	CVE-2024-53203 affecting package kernel for versions less than 6.6.90.1-1	10 Jul 202515:08	–	cbl_mariner
CBLMariner	CVE-2024-53203 affecting package kernel for versions less than 5.15.184.1-1	10 Jul 202515:06	–	cbl_mariner
Circl	CVE-2024-53203	27 Dec 202414:17	–	circl
CNNVD	Linux kernel 安全漏洞	27 Dec 202400:00	–	cnnvd
CVE	CVE-2024-53203	27 Dec 202413:49	–	cve
Debian	[SECURITY] [DLA 4271-1] linux-6.1 security update	12 Aug 202522:14	–	debian
Debian	[SECURITY] [DLA 4327-1] linux security update	13 Oct 202509:16	–	debian
Debian	[SECURITY] [DSA 5925-1] linux security update	24 May 202508:41	–	debian

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/typec/ucsi/ucsi_ccg.c"
    ],
    "versions": [
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "627c2a5056aba42a8a96a8fffe8996aeccf919a9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "e15fd96c0b701c53f9006bcc836eaeb35a05a023",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "e44189455c62469eb91d383ce9103d54c1f807a3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "0e66fd8e5a2e45c7dacfc9178ba702153f4a61a8",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "ef92cd55289a282910575c5b9d87f646f2d39b38",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "56971710cd541f2f05160a84b3183477d34a1be9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "170a6726d0e266f2c8f306e3d61715c32f4ee41e",
        "lessThan": "e56aac6e5a25630645607b6856d4b2a17b2311a5",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/typec/ucsi/ucsi_ccg.c"
    ],
    "versions": [
      {
        "version": "5.6",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.6",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.238",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.184",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.140",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.88",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.11.11",
        "lessThanOrEqual": "6.11.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.2",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.13",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/0e66fd8e5a2e45c7dacfc9178ba702153f4a61a8
git	www.git.kernel.org/stable/c/e44189455c62469eb91d383ce9103d54c1f807a3
git	www.git.kernel.org/stable/c/ef92cd55289a282910575c5b9d87f646f2d39b38
git	www.git.kernel.org/stable/c/56971710cd541f2f05160a84b3183477d34a1be9
git	www.git.kernel.org/stable/c/627c2a5056aba42a8a96a8fffe8996aeccf919a9
git	www.git.kernel.org/stable/c/e15fd96c0b701c53f9006bcc836eaeb35a05a023
git	www.git.kernel.org/stable/c/e56aac6e5a25630645607b6856d4b2a17b2311a5

11 May 2026 20:52Current

EPSS0.00011