Wind River Support Network

HomeDefectsLIN1021-12698

Fixed

LIN1021-12698 : Security Advisory - linux - CVE-2024-53203

Created: Dec 27, 2024 Updated: Nov 27, 2025

Resolved Date: Nov 27, 2025

Found In Version: 10.21.20.1

Fix Version: 10.21.20.26

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

The "command" variable can be controlled by the user via debugfs.  The
worry is that if con_index is zero then "&uc->ucsi->connector[con_index
- 1]" would be an array underflow.

CVEs

CVE-2024-53203