CVE-2024-46719

usb: typec: ucsi: Fix null pointer dereference in trace

State: Published
Severity: Not scored
Published: Sep 18, 2024
Updated: May 11, 2026
Reserved: Sep 11, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: Fix null pointer dereference in trace

ucsi_register_altmode checks IS_ERR for the alt pointer and treats NULL as valid. When CONFIG_TYPEC_DP_ALTMODE is not enabled, ucsi_register_displayport returns NULL which causes a NULL pointer dereference in trace. Rather than return NULL, call typec_port_register_altmode to register DisplayPort alternate mode as a non-controllable mode when CONFIG_TYPEC_DP_ALTMODE is not enabled.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 8095bf0579ed4906a33f7bec675bfb29b6b16a3bAffected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 7e64cabe81c303bdf6fd26b6a09a3289b33bc870Affected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 3aa56313b0de06ce1911950b2cc0c269614a87a9Affected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before b4243c05d7e3db0bdbf9124e6fa59b4ca7c807aeAffected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 3b9f2d9301ae67070fe77a0c06758722fd7172b7Affected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 99331fe68a8eaa4097143a33fb0c12d5e5e8e830Affected af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 99516f76db48e1a9d54cdfed63c1babcee4e71a5Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.284 through 5.4.Not affected 5.10.226 through 5.10.Not affected 5.15.167 through 5.15.Not affected 6.1.109 through 6.1.Not affected 6.6.50 through 6.6.Not affected 6.10.9 through 6.10.Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 8095bf0579ed4906a33f7bec675bfb29b6b16a3bAffected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 7e64cabe81c303bdf6fd26b6a09a3289b33bc870Affected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 3aa56313b0de06ce1911950b2cc0c269614a87a9Affected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before b4243c05d7e3db0bdbf9124e6fa59b4ca7c807aeAffected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 3b9f2d9301ae67070fe77a0c06758722fd7172b7Affected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 99331fe68a8eaa4097143a33fb0c12d5e5e8e830Affected
af8622f6a585d8d82b11cd7987e082861fd0edd3 to before 99516f76db48e1a9d54cdfed63c1babcee4e71a5Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.284 through 5.4.*Not affected
5.10.226 through 5.10.*Not affected
5.15.167 through 5.15.*Not affected
6.1.109 through 6.1.*Not affected
6.6.50 through 6.6.*Not affected
6.10.9 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.