CVE-2023-52938

usb: typec: ucsi: Don't attempt to resume the ports before they exist

State: Published
Severity: 5.5 Medium
Published: Mar 27, 2025
Updated: May 23, 2026
Reserved: Aug 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: Don't attempt to resume the ports before they exist

This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	9222912924fcf56e2d166a503eddbdb5ffd2005f to before fdd11d7136fd070b3a74d6d8799d9eac28a57fc5Affected e0dced9c7d4763fd97c86a13902d135f03cc42eb to before f82060da749c611ed427523b6d1605d87338aac1Affected 160416b397c362e37b590040a089604dd1f37de1Affected 6.0.15 to before 6.1Affected
LinuxLinux	6.1.1 to before 6.1.11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.