CyberRota Analysis
AI-GeneratedThe vulnerability affects the UCSI DisplayPort driver in the Linux kernel, which may experience an out-of-bounds (OOB) error due to improper validation of the GET_CURRENT_CAM response. If an invalid response exceeding the defined array length is returned, it could lead to a kernel crash, impacting system stability. Linux administrators and developers utilizing affected kernel versions should prioritize applying updates to mitigate potential disruptions.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode array index The UCSI displayport driver indexes the connector's port altmode array with the GET_CURRENT_CAM response after checking it is not 0xff. The port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and not equal to 0xff, the kernel may crash with an array index OOB error. Update the UCSI displayport driver to verify the current cam is less than UCSI_MAX_ALTMODES before accessing the port altmode array.