CVE-2024-40903
- Source
- https://cve.org/CVERecord?id=CVE-2024-40903
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-40903.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-40903
- Downstream
BELL (1)
RHSA (1)
SUSE (8)
- Related
- Published
- 2024-07-12T12:20:44Z
- Modified
- 2026-10-20T10:30:20Z
- Summary
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when:
- new (say invalid) source caps are advertised
- the existing source caps are unregistered
- tcpm_register_source_caps() returns with an error as usb_power_delivery_register_capabilities() fails
This causes port->partner_source_caps to hold on to the now freed source caps.
Reset port->partner_source_caps value to NULL after unregistering existing source caps.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40903.json" }- References
-
- https://git.kernel.org/stable/c/04c05d50fa79a41582f7bde8a1fd4377ae4a39e5
- https://git.kernel.org/stable/c/4053696594d7235f3638d49a00cf0f289e4b36a3
- https://git.kernel.org/stable/c/6b67b652849faf108a09647c7fde9b179ef24e2b
- https://git.kernel.org/stable/c/e7e921918d905544500ca7a95889f898121ba886
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40903.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-40903
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedcfcd544a9974c6b6fb37ca385146e4796dcaf66dFixed4053696594d7235f3638d49a00cf0f289e4b36a3
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb16abab1fb645c4b7a86c357dc83a48cf21c2795Fixed04c05d50fa79a41582f7bde8a1fd4377ae4a39e5
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced230ecdf71a644c9c73e0e6735b33173074ae3f94Fixed6b67b652849faf108a09647c7fde9b179ef24e2bFixede7e921918d905544500ca7a95889f898121ba886
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.1.91Fixed6.1.95
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.6.31Fixed6.6.35
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.8.10Fixed6.9
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced931b5f302d6f7126dbd6879c42d3d6ca580be423