CVE-2023-52877

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52877
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() It is possible that typec_register_partner() returns ERR_PTR on failure. When port->partner is an error, a NULL pointer dereference may occur as shown below. [91222.095236][ T319] typec port0: failed to register partner (-17) ... [91225.061491][ T319] Unable to handle kernel NULL pointer dereference at virtual address 000000000000039f [91225.274642][ T319] pc : tcpm_pd_data_request+0x310/0x13fc [91225.274646][ T319] lr : tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Call trace: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc [91225.308073][ T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][ T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Add a check for port->partner to avoid dereferencing a NULL pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b Patch
https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 Patch
https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b Patch
https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac Patch
https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc Patch
https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b Patch
https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 Patch
https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b Patch
https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac Patch
https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

06 Jan 2025, 20:32

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b - () https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b - Patch
References () https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 - () https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 - Patch
References () https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b - () https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b - Patch
References () https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac - () https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac - Patch
References () https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc - () https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc - Patch
First Time Linux linux Kernel
Linux
CWE CWE-476
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

21 Nov 2024, 08:40

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b - () https://git.kernel.org/stable/c/4987daf86c152ff882d51572d154ad12e4ff3a4b -
References () https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 - () https://git.kernel.org/stable/c/9ee038590d808a95d16adf92818dcd4752273c08 -
References () https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b - () https://git.kernel.org/stable/c/b37a168c0137156042a0ca9626651b5a789e822b -
References () https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac - () https://git.kernel.org/stable/c/e5f53a68a596e04df3fde3099273435a30b6fdac -
References () https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc - () https://git.kernel.org/stable/c/e7a802447c491903aa7cb45967aa2a934a4e63fc -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: usb: typec: tcpm: corrige la desreferencia del puntero NULL en tcpm_pd_svdm(). Es posible que typec_register_partner() devuelva ERR_PTR en caso de fallo. Cuando port->partner es un error, puede ocurrir una desreferencia de puntero NULL como se muestra a continuación. [91222.095236][T319] typec port0: no se pudo registrar el socio (-17)... [91225.061491][T319] No se puede manejar la desreferencia del puntero NULL del kernel en la dirección virtual 000000000000039f [91225.274642][T319] pc: tcpm_pd_data_request+0x310 /0x13fc [91225.274646][ T319] lr: tcpm_pd_data_request+0x298/0x13fc [91225.308067][ T319] Rastreo de llamadas: [91225.308070][ T319] tcpm_pd_data_request+0x310/0x13fc 3][T319] tcpm_pd_rx_handler+0x100/0x9e8 [91225.355900][T319] kthread_worker_fn+0x178/0x58c [91225.355902][ T319] kthread+0x150/0x200 [91225.355905][ T319] ret_from_fork+0x10/0x30 Agregue una verificación de port->partner para evitar desreferenciar un puntero NULL.

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-01-06 20:32

NVD link : CVE-2023-52877

Mitre link : CVE-2023-52877

CVE.ORG link : CVE-2023-52877

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference