CVE-2026-98759

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tipd: fix uninitialized typec partner desc in cd321x update work()

cd321x update work() passes a stack-allocated typec partner desc to typec register partner() after initializing only usb pd, accessory and identity.

typec register partner() copies attach and deattach from the descriptor into the partner. With those fields left unset, garbage function pointers may be stored and later invoked from typec partner link device() when a USB device is linked to the port. Uninitialized pd revision and usb capability similarly leak stack data through partner sysfs.

Zero-initialize the descriptor so optional callbacks remain NULL and the remaining fields are zero.