Overview
About vulnerability
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: Handle incorrect num_connectors capability
The UCSI spec states that the num_connectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it can lead to a system not booting. Flag that the FW is not behaving correctly, and auto-fix the value so that the system boots correctly.
Found on Lenovo P1 G8 during Linux enablement program. The FW will be fixed, but seemed worth addressing in case it hit platforms that aren’t officially Linux supported.
Details
- Affected product:
- AlmaLinux 9.2 ESU , Amazon Linux 2 ELS , CentOS 7 ELS , CentOS 8.4 ELS , CentOS 8.5 ELS , CentOS Stream 8 ELS , Debian 10 ELS , Oracle Linux 7 ELS , TuxCare 9.6 ESU , Ubuntu 16.04 ELS , Ubuntu 18.04 ELS , Ubuntu 20.04 ELS
- Affected packages:
- linux @ 4.19.0 (+11 more)
Fixes
KernelCare state
Live-patch status from KernelCare for each operating system.
| Operating system | Status | Covered kernels |
|---|---|---|
| AlmaLinux 9.6 ESU | Ready For Release | — |
| Debian 11 | Will Not Fix |
37 kernels
|
| Debian 11 cloud | Will Not Fix |
17 kernels
|
| Debian 12 | Will Not Fix |
33 kernels
|
| Debian 13 | Planned | — |
| Oracle Linux 8 UEK 7 | Will Not Fix |
85 kernels
|
| Oracle Linux 9 UEK 7 | Will Not Fix |
85 kernels
|
| Proxmox VE 7 5.15 | Will Not Fix |
47 kernels
|
| Ubuntu 20.04 HWE AWS | Will Not Fix |
57 kernels
|
| Ubuntu 20.04 HWE Azure | Will Not Fix |
40 kernels
|
| Ubuntu 22.04 | Will Not Fix |
90 kernels
|
| Ubuntu 22.04 AWS | Will Not Fix |
81 kernels
|
| Ubuntu 22.04 Azure | Will Not Fix |
73 kernels
|
| Ubuntu 24.04 | Will Not Fix |
41 kernels
|
| Ubuntu 24.04 AWS | Planned | — |