CVE-2026-63959

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usb typec tcpm/tcpci maxim component where the system fails to validate the header NDO against RX BYTE CNT. A malicious or malfunctioning port can send a CRC-valid frame that claims to contain up to seven data objects in the header, while the actual body contains fewer. This discrepancy can lead to the system reading from uninitialized stack memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.