What’s Vulnerable › Vulnerabilities

CVE-2024-53149: usb: typec: ucsi: glink: fix off-by-one in connector_status

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-24 · updated 2026-06-17
• Weakness: CWE-193

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Correct the condition in the pmic_glink_ucsi_connector_status() callback, fixing Type-C orientation reporting for the third USB-C connector.

Affected products

• Linux kernel: from 6.10 before 6.11.11; from 6.12 before 6.12.2 — fixed in 6.11.11, 6.12.2

How to fix

Upgrade to a fixed version: Linux kernel 6.11.11, 6.12.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca
• https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5
• https://git.kernel.org/stable/c/8a2273e5c1beb285729aa001422967b4711c53fe
• https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2

Get alerted when CVE-2024-53149 or the next vulnerability affects your stack