In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_altmode_attention Some usb hubs will negotiate DisplayPort Alt mode with the device but will then negotiate a data role swap after entering the alt mode. The data role swap causes the device to unregister all alt modes, however the usb hub will still send Attention messages even after failing to reregister the Alt Mode. type_altmode_attention currently does not verify whether or not a device's altmode partner exists, which results in a NULL pointer error when dereferencing the typec_altmode and typec_altmode_ops belonging to the altmode partner. Verify the presence of a device's altmode partner before sending the Attention message to the Alt Mode driver.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/0ad6bad31da692f8d7acacab07eabe7586239ae0 cve-icon cve-icon
https://git.kernel.org/stable/c/0d3b5fe47938e9c451466845304a2bd74e967a80 cve-icon cve-icon
https://git.kernel.org/stable/c/1101867a1711c27d8bbe0e83136bec47f8c1ca2a cve-icon cve-icon
https://git.kernel.org/stable/c/38e1f2ee82bacbbfded8f1c06794a443d038d054 cve-icon cve-icon
https://git.kernel.org/stable/c/5f71716772b88cbe0e1788f6a38d7871aff2120b cve-icon cve-icon
https://git.kernel.org/stable/c/d49547950bf7f3480d6ca05fe055978e5f0d9e5b cve-icon cve-icon
https://git.kernel.org/stable/c/f23643306430f86e2f413ee2b986e0773e79da31 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123032-CVE-2023-54299-ec86@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54299 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54299 cve-icon
History

Wed, 31 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: typec: bus: verify partner exists in typec_altmode_attention Some usb hubs will negotiate DisplayPort Alt mode with the device but will then negotiate a data role swap after entering the alt mode. The data role swap causes the device to unregister all alt modes, however the usb hub will still send Attention messages even after failing to reregister the Alt Mode. type_altmode_attention currently does not verify whether or not a device's altmode partner exists, which results in a NULL pointer error when dereferencing the typec_altmode and typec_altmode_ops belonging to the altmode partner. Verify the presence of a device's altmode partner before sending the Attention message to the Alt Mode driver.
Title usb: typec: bus: verify partner exists in typec_altmode_attention
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:23:35.146Z

Updated: 2025-12-30T12:23:35.146Z

Reserved: 2025-12-30T12:06:44.528Z

Link: CVE-2023-54299

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-12-30T13:16:19.010

Modified: 2025-12-30T13:16:19.010

Link: CVE-2023-54299

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54299 - Bugzilla