In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Don't attempt to resume the ports before they exist
This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered.
[
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/typec/ucsi/ucsi.c",
"function": "ucsi_resume"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f82060da749c611ed427523b6d1605d87338aac1",
"digest": {
"length": 102.0,
"function_hash": "302132064591752562468928811223040717273"
},
"id": "CVE-2023-52938-19fc1d54"
},
{
"signature_type": "Line",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/typec/ucsi/ucsi.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f82060da749c611ed427523b6d1605d87338aac1",
"digest": {
"line_hashes": [
"167039695250138359072280605113348913921",
"327616709375332506565579949333681483586",
"127202902855094952581512189405828092476",
"271465884136214797529695102743458748296",
"307534920217168736049589936106827322445",
"235296039708085172561226624812031970945",
"17905492681017820978700919311931007779",
"51180924700817187712512813627607455060",
"229326596026135770195123829863605947262",
"265835792116823616408444290596100445252"
],
"threshold": 0.9
},
"id": "CVE-2023-52938-8d9a533b"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/typec/ucsi/ucsi.c",
"function": "ucsi_init"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f82060da749c611ed427523b6d1605d87338aac1",
"digest": {
"length": 1473.0,
"function_hash": "25902339017070567426852219211850762118"
},
"id": "CVE-2023-52938-d5e51cfd"
},
{
"signature_type": "Function",
"deprecated": false,
"signature_version": "v1",
"target": {
"file": "drivers/usb/typec/ucsi/ucsi.c",
"function": "ucsi_unregister"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f82060da749c611ed427523b6d1605d87338aac1",
"digest": {
"length": 949.0,
"function_hash": "84857527476003186162378260894029136817"
},
"id": "CVE-2023-52938-e70c8ac7"
}
]