CVE-2023-54299
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/12/2025
Last modified:
30/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
usb: typec: bus: verify partner exists in typec_altmode_attention<br />
<br />
Some usb hubs will negotiate DisplayPort Alt mode with the device<br />
but will then negotiate a data role swap after entering the alt<br />
mode. The data role swap causes the device to unregister all alt<br />
modes, however the usb hub will still send Attention messages<br />
even after failing to reregister the Alt Mode. type_altmode_attention<br />
currently does not verify whether or not a device&#39;s altmode partner<br />
exists, which results in a NULL pointer error when dereferencing<br />
the typec_altmode and typec_altmode_ops belonging to the altmode<br />
partner.<br />
<br />
Verify the presence of a device&#39;s altmode partner before sending<br />
the Attention message to the Alt Mode driver.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/0ad6bad31da692f8d7acacab07eabe7586239ae0
- https://git.kernel.org/stable/c/0d3b5fe47938e9c451466845304a2bd74e967a80
- https://git.kernel.org/stable/c/1101867a1711c27d8bbe0e83136bec47f8c1ca2a
- https://git.kernel.org/stable/c/38e1f2ee82bacbbfded8f1c06794a443d038d054
- https://git.kernel.org/stable/c/5f71716772b88cbe0e1788f6a38d7871aff2120b
- https://git.kernel.org/stable/c/d49547950bf7f3480d6ca05fe055978e5f0d9e5b
- https://git.kernel.org/stable/c/f23643306430f86e2f413ee2b986e0773e79da31



