CVE-2026-63961

Published: Jul 19, 2026Modified: Oct 30, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: validate count before reading Status Update VDO A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and send it off elsewhere. Fix this up by correctly verifying the count for the update object.

Affected (12)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	4.19 ≤ version < 5.10.259
Linux Linux Kernel	5.11 ≤ version < 5.15.210
Linux Linux Kernel	5.16 ≤ version < 6.1.176
Linux Linux Kernel	6.13 ≤ version < 6.18.35
Linux Linux Kernel	6.19 ≤ version < 7.0.12
Linux Linux Kernel	6.2 ≤ version < 6.6.143
Linux Linux Kernel	6.7 ≤ version < 6.12.93
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3
Linux Linux Kernel	Version 7.1 rc4
Linux Linux Kernel	Version 7.1 rc5