Homepage

Improper Validation of Array Index The advisory has been revoked - it doesn't affect any version of package kernel-cross-headers  (opens in a new tab)

Threat Intelligence

EPSS
0.06% (18th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS9-KERNELCROSSHEADERS-8834764
  • published28 Feb 2025
  • disclosed27 Dec 2024
Report a new vulnerability Found a mistake?

Introduced: 27 Dec 2024

CVE-2024-53203  (opens in a new tab)
CWE-129  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-cross-headers package and not the kernel-cross-headers package as distributed by Centos.

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

The "command" variable can be controlled by the user via debugfs. The worry is that if con_index is zero then "&uc->ucsi->connector[con_index

  • 1]" would be an array underflow.