PT-2025-37532 · Lenovo+6 · Thinkpad X1 Yoga Gen7+6

CVE-2023-53168

·

Published

2023-03-09

·

Updated

2026-08-21

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to the Universal Serial Bus (USB) subsystem, specifically within the ucsi acpi component. A command completion timeout was initially increased to 60 seconds to address issues during alternate mode discovery, but was subsequently reduced to 1 second instead of being reset to the original 5 seconds. This reduction causes failures when connecting certain devices, such as a Lenovo ThinkPad X1 yoga gen7 connected to an LG 27UL850-W monitor via Type-C, resulting in errors like "PPM init failed (-110)" or "GET CONNECTOR STATUS failed (-110)".
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-05989
CVE-2023-53168
RHSA-2023:6583
RHSA-2023_6583
SUSE-SU-2025:03615-1
SUSE-SU-2025:3761-1

Affected Products

27Ul850-W
Astra Linux
Linux Kernel
Red Hat
Red Os
Suse
Thinkpad X1 Yoga Gen7