Lucene search
+L

244 matches found

CVE
CVE
•added 2025/04/01 3:40 p.m.•154 views

CVE-2025-21918

CVE-2025-21918 is a Linux kernel vulnerability described in connected Azure Linux advisory: usb: typec: ucsi: Fix NULL pointer access. The issue arises from premature resource release; the fix ensures resources are freed only after the associated workqueue completes, preventing NULL-pointer acces...

5.5CVSS7.2AI score0.00204EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2025/04/01 3:40 p.m.•15 views

CVE-2025-21918

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated...

5.5CVSS5.6AI score0.00204EPSS
SaveExploits0
osv_cve
osv_cve
•added 2025/04/01 3:40 p.m.•20 views

CVE-2025-21902 acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

6AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2025/04/01 3:40 p.m.•31 views

CVE-2025-21902 acpi: typec: ucsi: Introduce a ->poll_cci method

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

0.00205EPSS
SaveExploits0References3
CVE
CVE
•added 2025/04/01 3:40 p.m.•121 views

CVE-2025-21902

CVE-2025-21902 affects the Linux kernel (ACPI backends for UCSI). The vulnerability arises from the ucsi core handling of CCI polling and ACPI-opregion synchronization: backends may rely on an unnecessary/unsafe sync, which can be triggered while notifications are disabled and lead to a spurious ...

5.5CVSS7.2AI score0.00205EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2025/04/01 3:40 p.m.•21 views

CVE-2025-21902

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS5.7AI score0.00205EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•3 views

CVE-2025-21918: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all threads that utilize them have been destroyed. This commit ensures that resources are not released prematurely by waiting for the associated...

5.5CVSS5.7AI score0.00204EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•2 views

CVE-2025-21902: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: acpi: typec: ucsi: Introduce a -pollcci method For the ACPI backend of UCSI the UCSI "registers" are just a memory copy of the register values in an opregion. The ACPI implementation in the BIOS ensures that the opregion contents...

5.5CVSS5.8AI score0.00205EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/03/28 3:38 a.m.•12 views

SUSE CVE-2023-52938

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.5CVSS6.7AI score0.00211EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/03/27 5:15 p.m.•15 views

UBUNTU-CVE-2023-52938

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.5CVSS6.3AI score0.00211EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•3 views

CVE-2023-52938: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.5CVSS5.6AI score0.00211EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/27 12:00 a.m.•38 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from an attempt by the usb typec ucsi component to restore a port before port registration, resulting in a null...

5.5CVSS6.2AI score0.00211EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/02/17 12:00 a.m.•21 views

PT-2025-14283

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.11-200.fc41.x86 64 Description A vulnerability in the Linux kernel has been resolved. The issue is related to the ACPI backend of UCSI, where the UCSI "registers" are a memory copy of the register values in ...

8.8CVSS6AI score0.00527EPSS
SaveExploits0References217
osv_azl
osv_azl
•added 2024/12/27 2:15 p.m.•29 views

AZL-55733 CVE-2024-53203 affecting package kernel for versions less than 6.6.90.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...

7.8CVSS6.4AI score0.00274EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/27 2:15 p.m.•37 views

AZL-55788 CVE-2024-53203 affecting package kernel for versions less than 5.15.184.1-1

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...

7.8CVSS6.6AI score0.00274EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/27 2:15 p.m.•16 views

UBUNTU-CVE-2024-53203

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...

7.8CVSS6.4AI score0.00274EPSS
SaveExploits0References28
Debian CVE
Debian CVE
•added 2024/12/27 1:49 p.m.•20 views

CVE-2024-53203

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsiccgsynccontrol The "command" variable can be controlled by the user via debugfs. The worry is that if conindex is zero then "&uc-ucsi-connectorconindex - 1" would be an array...

7.8CVSS5.9AI score0.00274EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/24 1:27 p.m.•25 views

CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

4.6CVSS6.8AI score0.00316EPSS
SaveExploits0References4
NVD
NVD
•added 2024/12/24 12:15 p.m.•36 views

CVE-2024-53149

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connectorstatus UCSI connector's indices start from 1 up to 3, PMICGLINKMAXPORTS. Correct the condition in the pmicglinkucsiconnectorstatus callback, fixing Type-C orientation reporting...

4.6CVSS0.00316EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/24 11:28 a.m.•149 views

CVE-2024-53149

Technical details (affected product, root cause, impact, fix) are not publicly provided in the connected documents; monitor for updates.

4.6CVSS6.5AI score0.00316EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder