CVE-2026-63963
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers<br />
<br />
Properly validate the count passed from a device when calling<br />
svdm_consume_identity() or svdm_consume_identity_sop_prime() as the<br />
device-controlled value could index off of the static arrays, which<br />
could leak data.