In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Limit read size on v1.2
Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI version to truncate read sizes on UCSI v1.2.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-core | Aug 12, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | May 15, 2025 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules | Aug 22, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-apmUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-amazon | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k | Jul 12, 2024 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub