CVE-2024-46691
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
usb: typec: ucsi: Move unregister out of atomic section
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Move unregister out of atomic section Commit '9329933699b3 ("soc: qcom: pmic_glink: Make client-lock non-sleeping")' moved the pmic_glink client list under a spinlock, as it is accessed by the rpmsg/glink callback, which in turn is invoked from IRQ context. This means that ucsi_unregister() is now called from atomic context, which isn't feasible as it's expecting a sleepable context. An effort is under way to get GLINK to invoke its callbacks in a sleepable context, but until then lets schedule the unregistration. A side effect of this is that ucsi_unregister() can now happen after the remote processor, and thereby the communication link with it, is gone. pmic_glink_send() is amended with a check to avoid the resulting NULL pointer dereference. This does however result in the user being informed about this error by the following entry in the kernel log: ucsi_glink.pmic_glink_ucsi pmic_glink.ucsi.0: failed to send UCSI write request: -5
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| fbadcde1572f6b00e1e343d8b24ec8bf7f3ec08d | affected | git | 1e3769aa0946c2b6e509c06d7a0aa9b955eaef9e | Unavailable | None listed |
| 9329933699b32d467a99befa20415c4b2172389a | affected | git | 095b0001aefddcd9361097c971b7debc84e72714 | Unavailable | None listed |
| 9329933699b32d467a99befa20415c4b2172389a | affected | git | 11bb2ffb679399f99041540cf662409905179e3a | Unavailable | None listed |
| 8d62ab7d89a4906385ea8c11a4b2475578bec0f0 | affected | git | Unavailable | Unavailable | None listed |
| bd54d7c8e76d235b4a70be3a545eb13f5ac531e4 | affected | git | Unavailable | Unavailable | None listed |
| 6.6.33 | affected | semver | 6.6.130 | Unavailable | None listed |
| 6.8.12 | affected | semver | 6.9 | Unavailable | None listed |
| 6.9.3 | affected | semver | 6.10 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.10 | Unavailable | None listed |
| 6.6.130 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.10.8 | unaffected | semver | Unavailable | 6.10.* | None listed |
| 6.11 | unaffected | original_commit_for_fix | Unavailable | * | None listed |