CVE-2026-63962

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the USB Type-C TCPM component where the svdm consume modes() function fails to perform bound checks on the altmode desc[] array during each iteration of its loop. While a check is performed before the loop starts, the lack of per-iteration validation allows a malicious or malfunctioning port partner to send an unsolicited Discover Modes ACK with excessive Vendor Defined Data Objects (VDOs). This can lead to an out-of-bounds write, potentially overwriting the partner altmode[] pointer array within the tcpm port structure with arbitrary SVID/VDO bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.