CVE-2025-71108 (CNNVD-202601-2455)
中文标题:
Linux kernel 安全漏洞
英文标题:
usb: typec: ucsi: Handle incorrect num_connectors capability
漏洞描述
中文描述:
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未正确处理错误的num_connectors能力值，可能导致系统无法启动。
英文描述:
In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec states that the num_connectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it can lead to a system not booting. Flag that the FW is not behaving correctly, and auto-fix the value so that the system boots correctly. Found on Lenovo P1 G8 during Linux enablement program. The FW will be fixed, but seemed worth addressing in case it hit platforms that aren't officially Linux supported.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Linux | Linux | - | < f72f97d0aee4a993a35f2496bca5efd24827235d | - |
cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-71108 |
2026-01-15 02:17:38 | 2026-01-15 06:00:15 |
| NVD | nvd_CVE-2025-71108 |
2026-01-15 03:00:07 | 2026-01-15 06:00:27 |
| CNNVD | cnnvd_CNNVD-202601-2455 |
2026-01-16 02:47:02 | 2026-01-16 02:48:26 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- severity: SeverityLevel.MEDIUM -> SeverityLevel.UNKNOWN
- cvss_score: 未提取 -> 0.0
- cnnvd_id: 未提取 -> CNNVD-202601-2455
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 6 -> 1
- data_sources: ['cve'] -> ['cve', 'nvd']