CVE-2023-53168
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
15/09/2025
Última modificación:
24/11/2025
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
usb: ucsi_acpi: Increase the command completion timeout<br />
<br />
Commit 130a96d698d7 ("usb: typec: ucsi: acpi: Increase command<br />
completion timeout value") increased the timeout from 5 seconds<br />
to 60 seconds due to issues related to alternate mode discovery.<br />
<br />
After the alternate mode discovery switch to polled mode<br />
the timeout was reduced, but instead of being set back to<br />
5 seconds it was reduced to 1 second.<br />
<br />
This is causing problems when using a Lenovo ThinkPad X1 yoga gen7<br />
connected over Type-C to a LG 27UL850-W (charging DP over Type-C).<br />
<br />
When the monitor is already connected at boot the following error<br />
is logged: "PPM init failed (-110)", /sys/class/typec is empty and<br />
on unplugging the NULL pointer deref fixed earlier in this series<br />
happens.<br />
<br />
When the monitor is connected after boot the following error<br />
is logged instead: "GET_CONNECTOR_STATUS failed (-110)".<br />
<br />
Setting the timeout back to 5 seconds fixes both cases.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (incluyendo) | 6.1.22 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (incluyendo) | 6.2.9 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



