CVE-2024-35924

MEDIUM

Linux Kernel 5.5-6.6.26, 6.7-6.8.5 - Buffer Overflow via UCSI MESSAGE_IN Region Read

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI version to truncate read sizes on UCSI v1.2.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/266f403ec47573046dee4bcebda82777ce702c40

Patch

https://git.kernel.org/stable/c/0defcaa09d3b21e8387829ee3a652c43fa91e13f

Patch

https://git.kernel.org/stable/c/b3db266fb031fba88c423d4bb8983a73a3db6527

Scores

CVSS v3 5.5

EPSS 0.0021

EPSS Percentile 11.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (11)

linux/Kernel 5.5.0 - 6.6.27linux

linux/Kernel 6.7.0 - 6.8.6linux

Linux/Linux < 5.5

Linux/Linux 5.5

Linux/Linux 6.6.27 - 6.6.*

Linux/Linux 6.8.6 - 6.8.*

Linux/Linux 6.9

Linux/Linux bdc62f2bae8fb0e8e99574de5232f0a3c54a27df - 0defcaa09d3b21e8387829ee3a652c43fa91e13f

Linux/Linux bdc62f2bae8fb0e8e99574de5232f0a3c54a27df - 266f403ec47573046dee4bcebda82777ce702c40

Linux/Linux bdc62f2bae8fb0e8e99574de5232f0a3c54a27df - b3db266fb031fba88c423d4bb8983a73a3db6527

... and 1 more

Published May 19, 2024

Tracked Since Feb 18, 2026