CVE-2023-52877: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpmpdsvdm()
It is possible that typecregisterpartner() returns ERRPTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below.
[91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpmpddatarequest+0x310/0x13fc [91225.274646][ T319] lr : tcpmpddatarequest+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpmpddatarequest+0x310/0x13fc [91225.308073][ T319] tcpmpdrxhandler+0x100/0x9e8 [91225.355900][ T319] kthreadworkerfn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] retfromfork+0x10/0x30
Add a check for port->partner to avoid dereferencing a NULL pointer.
Other sources
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: Fix NULL pointer dereference in tcpmpdsvdm()
The Linux kernel CVE team has assigned CVE-2023-52877 to this issue.
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024052122-CVE-2023-52877-0826@gregkh/T
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52877?
CVE-2023-52877 has a high severity due to the potential for a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2023-52877?
To fix CVE-2023-52877, update the Linux kernel to version 5.15.138, 6.1.62, 6.5.11, 6.6.1, or 6.7.
Which versions of the Linux kernel are affected by CVE-2023-52877?
CVE-2023-52877 affects Linux kernel versions up to 5.15.138, 6.1.62, 6.5.11, 6.6.1, and 6.7.
What component of the Linux kernel does CVE-2023-52877 impact?
CVE-2023-52877 impacts the USB Type-C Port Manager (tcpm) component of the Linux kernel.
Can CVE-2023-52877 be exploited remote?
Yes, CVE-2023-52877 can potentially be exploited remotely due to the nature of the vulnerability in the USB subsystem.