CVE-2026-63963

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdm_consume_identity() or svdm_consume_identity_sop_prime() as the device-controlled value could index off of the static arrays, which could leak data.

Rincian

Terbit di NVD

19 Juli 2026

Terakhir diubah

30 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/150c30131c032b4b1ad9acd29f2834321d85ae4b patch
• https://git.kernel.org/stable/c/569f7971542eb10025d8a0989b83f28a29d8ba20 patch
• https://git.kernel.org/stable/c/6bacd22e1eae77abf089bbdc016270200a8dc83b patch
• https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17 patch
• https://git.kernel.org/stable/c/ed8649f3822e211d025bcab5158af6f8a38c8705 patch
• https://git.kernel.org/stable/c/f9d787fbe83127105e42088cca40e5118db0d810 patch