Lucene search
+L

243 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/20 12:00 a.m.•4 views

CVE-2025-37967: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsiconmutexlock / ucsiconmutexunlock functions to the UCSI driver. ucsiconmutexlock ensures the connector mutex is only locked if a connection is established...

5.5CVSS6AI score0.0016EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•23 views

kernel: usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

A flaw was found in the Linux kernel's USB Type-C driver. A local user with administrative privileges can exploit this flaw by providing a crafted command through the debug file system debugfs. This issue results in an array underflow and out-of-bounds memory access, which may lead to a system...

7.8CVSS7AI score0.00274EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
•added 2025/05/05 7:00 a.m.•10 views

usb: typec: ucsi: Fix NULL pointer access

...

5.5CVSS7.4AI score0.00204EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/04 4:29 p.m.•14 views

CVE-2023-53049

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS7AI score0.00202EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2025/05/02 4:15 p.m.•10 views

CVE-2023-53049

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS6.2AI score0.00202EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2025/05/02 4:15 p.m.•18 views

CVE-2023-53049

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS0.00202EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2025/05/02 4:15 p.m.•3 views

DEBIAN-CVE-2023-53049

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS5.5AI score0.00202EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/05/02 4:15 p.m.•18 views

UBUNTU-CVE-2023-53049

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS5.9AI score0.00202EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/05/02 3:55 p.m.•33 views

CVE-2023-53049 usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

0.00202EPSS
SaveExploits0References5
CVE
CVE
•added 2025/05/02 3:55 p.m.•117 views

CVE-2023-53049

CVE-2023-53049 – Linux kernel USB-C/UCSI pointer dereference . A NULL pointer dereference in ucsi_connector_change() could occur if ucsi_init() failed and an event arrives via ucsi_acpi, dereferencing unable ucsi->connector. The fix prevents ntfy from being set until ucsi_init() succeeds, so e...

5.5CVSS6.6AI score0.00202EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2025/05/02 3:55 p.m.•18 views

CVE-2023-53049 usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

6.1AI score
SaveExploits0References8
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•21 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the ucsiconnectorchange function not checking the state of ucsi initialization, which could lead to a null...

5.5CVSS6.3AI score0.00202EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/02 12:00 a.m.•3 views

CVE-2023-53049: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsiconnectorchange When ucsiinit fails, ucsi-connector is NULL, yet in case of ucsiacpi we may still get events which cause the ucsacpi code to call ucsiconnectorchange, which then derefs the...

5.5CVSS5.8AI score0.00202EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•20 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the pollcci function in the drivers/usb/typec/ucsi/ucsi.c file of the Linux kernel is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

4.6CVSS6.6AI score0.00205EPSS
SaveExploits0References9Affected Software4
SUSE CVE
SUSE CVE
•added 2025/04/02 1:29 p.m.•14 views

SUSE CVE-2025-21918

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated...

5.5CVSS7.7AI score0.00204EPSS
SaveExploits0References15
SUSE CVE
SUSE CVE
•added 2025/04/02 8:57 a.m.•17 views

SUSE CVE-2025-21902

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS7.8AI score0.00205EPSS
SaveExploits0References5
osv_azl
osv_azl
•added 2025/04/01 4:15 p.m.•22 views

AZL-59937 CVE-2025-21918 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated...

5.5CVSS6.6AI score0.00204EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/04/01 4:15 p.m.•6 views

DEBIAN-CVE-2025-21918

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated...

5.5CVSS5.6AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 4:15 p.m.•17 views

CVE-2025-21902

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS0.00205EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/01 3:40 p.m.•154 views

CVE-2025-21918

CVE-2025-21918 is a Linux kernel vulnerability described in connected Azure Linux advisory: usb: typec: ucsi: Fix NULL pointer access. The issue arises from premature resource release; the fix ensures resources are freed only after the associated workqueue completes, preventing NULL-pointer acces...

5.5CVSS7.2AI score0.00204EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder