CVE-2024-53149usb: typec: ucsi: glink: fix off-by-one in connector_status
- 4.6MediumCVSS base score
- 0.32%Exploitation in 30 daysEPSS · top 75% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix off-by-one in connector_status UCSI connector's indices start from 1 up to 3, PMIC_GLINK_MAX_PORTS. Correct the condition in the pmic_glink_ucsi_connector_status() callback, fixing Type-C orientation reporting for the third USB-C connector.
Timeline
ID reserved
By Linux
- 35 days later
· 35 days later
Published
- 17 months later
· 17 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.1 | Medium4.6 | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.32% · top 75% of all CVEs (14 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.
Affected products
- affected fd662c37a1087a2631cd2544138650b153e65f90 – < 8a2273e5c1beb285729aa001422967b4711c53fe
- affected 76716fd5bf09725c2c6825264147f16c21e56853 – < 9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2
- affected 76716fd5bf09725c2c6825264147f16c21e56853 – < 6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5
- affected 76716fd5bf09725c2c6825264147f16c21e56853 – < 4a22918810980897393fa1776ea3877e4baf8cca
- affected 6.10
- unaffected < 6.10
- unaffected 6.11.11 – ≤ 6.11.*
- unaffected 6.12.2 – ≤ 6.12.*
- unaffected 6.13 – ≤ *
References
References4
- https://git.kernel.org/stable/c/8a2273e5c1beb285729aa001422967b4711c53fe (opens in a new tab)
- https://git.kernel.org/stable/c/9a5a8b5bd72169aa7a8ec800ef57be2f2cb4d9b2 (opens in a new tab)
- https://git.kernel.org/stable/c/6ba6f7f29e0dff47a2799e60dcd1b5c29cd811a5 (opens in a new tab)
- https://git.kernel.org/stable/c/4a22918810980897393fa1776ea3877e4baf8cca (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-51821 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-53149)Record last updated .