CVE-2024-53203

HIGH EPSS 15.0%
Published Dec 27, 20241y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Dec 27, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential array underflow in ucsi_ccg_sync_control() The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is zero then "&uc->ucsi->connector[con_index - 1]" would be an array underflow.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
15.0% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-129

Affected Products 2

VendorProductVersionRange
linuxlinux_kernel*≥5.6  –  <6.11.11
linuxlinux_kernel*≥6.12  –  <6.12.2

References 9

  • git.kernel.org https://git.kernel.org/stable/c/0e66fd8e5a2e45c7dacfc9178ba702153f4a61a8
  • git.kernel.org https://git.kernel.org/stable/c/56971710cd541f2f05160a84b3183477d34a1be9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/627c2a5056aba42a8a96a8fffe8996aeccf919a9
  • git.kernel.org https://git.kernel.org/stable/c/e15fd96c0b701c53f9006bcc836eaeb35a05a023
  • git.kernel.org https://git.kernel.org/stable/c/e44189455c62469eb91d383ce9103d54c1f807a3
  • git.kernel.org https://git.kernel.org/stable/c/e56aac6e5a25630645607b6856d4b2a17b2311a5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ef92cd55289a282910575c5b9d87f646f2d39b38
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/56971710cd541f2f05160a84b3183477d34a1be9
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e56aac6e5a25630645607b6856d4b2a17b2311a5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/ef92cd55289a282910575c5b9d87f646f2d39b38
    Patch