https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:19:44 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53049 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()</p> <p>When ucsi_init() fails, ucsi-&gt;connector is NULL, yet in case of ucsi_acpi we may still get events which cause the ucs_acpi code to call ucsi_connector_change(), which then derefs the NULL ucsi-&gt;connector pointer.</p> <p>Fix this by not setting ucsi-&gt;ntfy inside ucsi_init() until ucsi_init() has succeeded, so that ucsi_connector_change() ignores the events because UCSI_ENABLE_NTFY_CONNECTOR_CHANGE is not set in the ntfy mask.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: ucsi: Fix NULL pointer deref in ucsi_connector_change()</p> <p>When ucsi_init() fails, ucsi-&gt;connector is NULL, yet in case of ucsi_acpi we may still get events which cause the ucs_acpi code to call ucsi_connector_change(), which then derefs the NULL ucsi-&gt;connector pointer.</p> <p>Fix this by not setting ucsi-&gt;ntfy inside ucsi_init() until ucsi_init() has succeeded, so that ucsi_connector_change() ignores the events because UCSI_ENABLE_NTFY_CONNECTOR_CHANGE is not set in the ntfy mask.</p> https://vulnerability.circl.lu/vuln/cve-2023-53049