CVE-2021-46980

Summary

CVE-2021-46980 is a vulnerability affecting the Linux kernel's USB Type-C subsystem. The issue arises from the limitation to retrieving only the first four Power Data Objects (PDOs) when connected to a Power Delivery (PD) capable source. However, according to the PD specification, a connected source may advertise up to a maximum of seven PDOs. If such a source is connected and the Power Path Manager (PPM) enters a contract with a PDO at an index greater than four, an out-of-bounds access occurs when indexing into the src_pdos array in ucsi_psy_get_voltage_now(). This vulnerability is revealed with the UBSAN array-bounds checker when connecting to a PD source adapter that advertises five or more PDOs. The issue can be resolved by retrieving and storing up to the maximum of seven PDOs in the con->src_pdos array, requiring two calls to the GET_PDOS command.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.