CVE-2024-53149

Summary

CVE-2024-53149 is a newly resolved vulnerability in the Linux kernel's USB Type-C subsystem. The issue lies in the pmic_glink_ucsi_connector_status() callback function, where an off-by-one error occurred. This error affected the reporting of Type-C orientation for the third USB-C connector. The UCSI connector's indices are numbered from 1 to 3, and the PMIC_GLINK_MAX_PORTS limit was not taken into account, leading to incorrect handling of the third connector. The vulnerability has been rectified to prevent any potential misconfiguration or incorrect orientation reporting.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.