PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2023-54186

CVE-2023-54186

kernel: usb: typec: altmodes/displayport: fix pin_assignment_show

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 30, 2025

Updated · August 5, 2026

Description

An out-of-bounds array access was found in the USB Type-C DisplayPort altmode driver. When no compatible pin assignments are found, the code performs negative array indexing, causing a use-after-free or out-of-bounds read.

Statement

This is triggered by reading the pin_assignment sysfs file on USB-C DisplayPort altmode devices when no valid assignments exist. Exploitation requires physical access to a USB-C port and interaction with sysfs.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-823 · Use of Out-of-range Pointer Offset