In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invalid) source caps are advertised * the existing source caps are unregistered * tcpm_register_source_caps() returns with an error as usb_power_delivery_register_capabilities() fails
This causes port->partner_source_caps to hold on to the now freed source caps.
Reset port->partner_source_caps value to NULL after unregistering existing source caps.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 18, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade dtb-xilinx | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub