Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Limit read size on v1.2 Between UCSI 1.2 and UCSI 2.0, the size of the MESSAGE_IN region was increased from 16 to 256. In order to avoid overflowing reads for older systems, add a mechanism to use the read UCSI version to truncate read sizes on UCSI v1.2.

INFO

Published Date :

2024-05-19T10:10:35.044Z

Last Modified :

2025-05-21T09:12:36.855Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-35924 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Eus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-35924.

URL Resource
https://git.kernel.org/stable/c/0defcaa09d3b21e8387829ee3a652c43fa91e13f cve-icon cve-icon
https://git.kernel.org/stable/c/266f403ec47573046dee4bcebda82777ce702c40 cve-icon cve-icon
https://git.kernel.org/stable/c/b3db266fb031fba88c423d4bb8983a73a3db6527 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024051914-CVE-2024-35924-90f6@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-35924 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-35924 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact