CVE-2023-53049

MEDIUM EPSS 5.5%
Published May 2, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 2, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() When ucsi_init() fails, ucsi->connector is NULL, yet in case of ucsi_acpi we may still get events which cause the ucs_acpi code to call ucsi_connector_change(), which then derefs the NULL ucsi->connector pointer. Fix this by not setting ucsi->ntfy inside ucsi_init() until ucsi_init() has succeeded, so that ucsi_connector_change() ignores the events because UCSI_ENABLE_NTFY_CONNECTOR_CHANGE is not set in the ntfy mask.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
5.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥5.5  –  <5.10.177
linuxlinux_kernel*≥5.11  –  <5.15.105
linuxlinux_kernel*≥5.16  –  <6.1.22
linuxlinux_kernel*≥6.2  –  <6.2.9
linuxlinux_kernel6.3any
linuxlinux_kernel6.3any
linuxlinux_kernel6.3any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/1c5abcb13491da8c049f20462189c12c753ba978
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7dd27aed9c456670b3882877ef17a48195f21693
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ef0423e43f877a328454059d46763043ce3da44
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a6adfe9bbd6ac11e398b54ccd99a0f8eea09f3c0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f87fb985452ab2083967103ac00bfd68fb182764
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/1c5abcb13491da8c049f20462189c12c753ba978
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7dd27aed9c456670b3882877ef17a48195f21693
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7ef0423e43f877a328454059d46763043ce3da44
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a6adfe9bbd6ac11e398b54ccd99a0f8eea09f3c0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f87fb985452ab2083967103ac00bfd68fb182764
    Patch