CVE-2023-54186

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the USB Type-C DisplayPort alternative mode functionality. Specifically, a negative indexing issue exists in the pin assignment show function when no compatible pin assignments are found. This can lead to a use-after-free condition, as indicated by a Kernel Address Sanitizer (KASAN) report. The issue occurs when get current pin assignments returns 0, resulting in an out-of-bounds access on the buf array within the pin assignment show function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.