2024-07-12 13:00:50 +00:00
{
2024-07-15 07:01:32 +00:00
"data_version" : "4.0" ,
2024-07-12 13:00:50 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2024-40903" ,
2024-07-15 07:01:32 +00:00
"ASSIGNER" : "cve@kernel.org" ,
"STATE" : "PUBLIC"
2024-07-12 13:00:50 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-07-15 07:01:32 +00:00
"value" : "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps\n\nThere could be a potential use-after-free case in\ntcpm_register_source_caps(). This could happen when:\n * new (say invalid) source caps are advertised\n * the existing source caps are unregistered\n * tcpm_register_source_caps() returns with an error as\n usb_power_delivery_register_capabilities() fails\n\nThis causes port->partner_source_caps to hold on to the now freed source\ncaps.\n\nReset port->partner_source_caps value to NULL after unregistering\nexisting source caps."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
2024-07-12 13:00:50 +00:00
}
]
2024-07-15 07:01:32 +00:00
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Linux" ,
"product" : {
"product_data" : [
{
"product_name" : "Linux" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_name" : "cfcd544a9974" ,
"version_value" : "4053696594d7"
} ,
{
"version_affected" : "<" ,
"version_name" : "b16abab1fb64" ,
"version_value" : "04c05d50fa79"
} ,
{
"version_affected" : "<" ,
"version_name" : "230ecdf71a64" ,
"version_value" : "6b67b652849f"
} ,
{
"version_value" : "not down converted" ,
"x_cve_json_5_version_data" : {
"versions" : [
{
"version" : "6.9" ,
"status" : "affected"
} ,
{
"version" : "0" ,
"lessThan" : "6.9" ,
"status" : "unaffected" ,
2024-11-05 10:03:27 +00:00
"versionType" : "semver"
2024-07-15 07:01:32 +00:00
} ,
{
"version" : "6.1.95" ,
"lessThanOrEqual" : "6.1.*" ,
"status" : "unaffected" ,
2024-11-05 10:03:27 +00:00
"versionType" : "semver"
2024-07-15 07:01:32 +00:00
} ,
{
"version" : "6.6.35" ,
"lessThanOrEqual" : "6.6.*" ,
"status" : "unaffected" ,
2024-11-05 10:03:27 +00:00
"versionType" : "semver"
2024-07-15 07:01:32 +00:00
} ,
{
"version" : "6.9.6" ,
"lessThanOrEqual" : "6.9.*" ,
"status" : "unaffected" ,
2024-11-05 10:03:27 +00:00
"versionType" : "semver"
2024-07-15 07:01:32 +00:00
} ,
{
"version" : "6.10" ,
"lessThanOrEqual" : "*" ,
"status" : "unaffected" ,
"versionType" : "original_commit_for_fix"
}
] ,
"defaultStatus" : "affected"
}
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://git.kernel.org/stable/c/4053696594d7235f3638d49a00cf0f289e4b36a3" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/4053696594d7235f3638d49a00cf0f289e4b36a3"
} ,
{
"url" : "https://git.kernel.org/stable/c/04c05d50fa79a41582f7bde8a1fd4377ae4a39e5" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/04c05d50fa79a41582f7bde8a1fd4377ae4a39e5"
} ,
{
"url" : "https://git.kernel.org/stable/c/6b67b652849faf108a09647c7fde9b179ef24e2b" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/6b67b652849faf108a09647c7fde9b179ef24e2b"
} ,
{
"url" : "https://git.kernel.org/stable/c/e7e921918d905544500ca7a95889f898121ba886" ,
"refsource" : "MISC" ,
"name" : "https://git.kernel.org/stable/c/e7e921918d905544500ca7a95889f898121ba886"
}
]
} ,
"generator" : {
2024-11-05 10:03:27 +00:00
"engine" : "bippy-9e1c9544281a"
2024-07-12 13:00:50 +00:00
}
}
