CVE-2023-54299
Estado: AplazadaSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: bus: verify partner exists in typec_altmode_attention
Some usb hubs will negotiate DisplayPort Alt mode with the device but will then negotiate a data role swap after entering the alt mode. The data role swap causes the device to unregister all alt modes, however the usb hub will still send Attention messages even after failing to reregister the Alt Mode. type_altmode_attention currently does not verify whether or not a device's altmode partner exists, which results in a NULL pointer error when dereferencing the typec_altmode and typec_altmode_ops belonging to the altmode partner.
Leer descripción completaMostrar menos
Verify the presence of a device's altmode partner before sending the Attention message to the Alt Mode driver.
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.21%
- Percentil entre todas las CVEs puntuadas: 10
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/0ad6bad31da692f8d7acacab07eabe7586239ae0
- https://git.kernel.org/stable/c/0d3b5fe47938e9c451466845304a2bd74e967a80
- https://git.kernel.org/stable/c/1101867a1711c27d8bbe0e83136bec47f8c1ca2a
- https://git.kernel.org/stable/c/38e1f2ee82bacbbfded8f1c06794a443d038d054
- https://git.kernel.org/stable/c/5f71716772b88cbe0e1788f6a38d7871aff2120b
- https://git.kernel.org/stable/c/d49547950bf7f3480d6ca05fe055978e5f0d9e5b
- https://git.kernel.org/stable/c/f23643306430f86e2f413ee2b986e0773e79da31
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54299",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "5f71716772b88cbe0e1788f6a38d7871aff2120b",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "38e1f2ee82bacbbfded8f1c06794a443d038d054",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "0ad6bad31da692f8d7acacab07eabe7586239ae0",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "0d3b5fe47938e9c451466845304a2bd74e967a80",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "d49547950bf7f3480d6ca05fe055978e5f0d9e5b",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "1101867a1711c27d8bbe0e83136bec47f8c1ca2a",
"versionType": "git"
},
{
"status": "affected",
"version": "8a37d87d72f0c69f837229c04d2fcd7117ea57e7",
"lessThan": "f23643306430f86e2f413ee2b986e0773e79da31",
"versionType": "git"
}
],
"programFiles": [
"drivers/usb/typec/bus.c",
"drivers/usb/typec/tcpm/tcpm.c",
"include/linux/usb/typec_altmode.h"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.257",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.195",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.132",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.53",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.4.16",
"versionType": "semver",
"lessThanOrEqual": "6.4.*"
},
{
"status": "unaffected",
"version": "6.5.3",
"versionType": "semver",
"lessThanOrEqual": "6.5.*"
},
{
"status": "unaffected",
"version": "6.6",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/usb/typec/bus.c",
"drivers/usb/typec/tcpm/tcpm.c",
"include/linux/usb/typec_altmode.h"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-30T13:16:19.010",
"references": [
{
"url": "https://git.kernel.org/stable/c/0ad6bad31da692f8d7acacab07eabe7586239ae0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/0d3b5fe47938e9c451466845304a2bd74e967a80",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1101867a1711c27d8bbe0e83136bec47f8c1ca2a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/38e1f2ee82bacbbfded8f1c06794a443d038d054",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5f71716772b88cbe0e1788f6a38d7871aff2120b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d49547950bf7f3480d6ca05fe055978e5f0d9e5b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f23643306430f86e2f413ee2b986e0773e79da31",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: bus: verify partner exists in typec_altmode_attention\n\nSome usb hubs will negotiate DisplayPort Alt mode with the device\nbut will then negotiate a data role swap after entering the alt\nmode. The data role swap causes the device to unregister all alt\nmodes, however the usb hub will still send Attention messages\neven after failing to reregister the Alt Mode. type_altmode_attention\ncurrently does not verify whether or not a device's altmode partner\nexists, which results in a NULL pointer error when dereferencing\nthe typec_altmode and typec_altmode_ops belonging to the altmode\npartner.\n\nVerify the presence of a device's altmode partner before sending\nthe Attention message to the Alt Mode driver."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nusb: typec: bus: verificar que el socio existe en typec_altmode_attention\n\nAlgunos concentradores USB negociarán el modo alternativo DisplayPort con el dispositivo, pero luego negociarán un intercambio de rol de datos después de entrar en el modo alternativo. El intercambio de rol de datos hace que el dispositivo anule el registro de todos los modos alternativos; sin embargo, el concentrador USB seguirá enviando mensajes de Atención incluso después de no poder volver a registrar el Modo Alternativo. type_altmode_attention actualmente no verifica si existe o no el socio de modo alternativo de un dispositivo, lo que resulta en un error de puntero NULL al desreferenciar el typec_altmode y typec_altmode_ops pertenecientes al socio de modo alternativo.\n\nVerificar la presencia del socio de modo alternativo de un dispositivo antes de enviar el mensaje de Atención al controlador del Modo Alternativo."
}
],
"lastModified": "2026-06-17T06:47:10.947",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}