Linux Kernel USB Type-C TCPM VDO Count Validation Vulnerability

A vulnerability in the Linux kernel's USB Type-C TCPM (Type-C Port Management) driver has been addressed. The issue involved improper validation of the VDO (Vendor Defined Object) count received from a device during the Discover Identity ACK process. This lack of validation could allow a device-controlled value to index into static arrays, potentially leading to data leakage.

Impact

The vulnerability could result in unintended data exposure due to improper validation of device-controlled values, allowing for potential data leakage from the kernel.

Reproduction

The vulnerability can be reproduced by connecting a USB Type-C device that sends an invalid VDO count during the Discover Identity process. The TCPM driver will then improperly handle the VDO data, leading to a potential leak of sensitive information.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched kernel can be found on the official Linux kernel website.