CVE-2024-46719

A flaw was found in the Linux kernel's USB Type-C Unified Connector Interface (UCSI) subsystem. This vulnerability occurs when the ucsi_register_altmode function incorrectly handles a NULL pointer returned by ucsi_register_displayport when the DisplayPort alternate mode is not enabled. A local attacker could potentially trigger a null pointer dereference in the trace functionality, leading to a system crash and a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the typec_ucsi kernel module from loading by creating a file named /etc/modprobe.d/blacklist-typec_ucsi.conf with the following content:

blacklist typec_ucsi

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This action may impact the functionality of USB Type-C ports.