CVE-2026-64330

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the svdm consume modes() function. The issue occurs because the SVID value is read from the pmdata->svids array using pmdata->svid index as an index without proper bounds validation. If pmdata->svid index exceeds SVID DISCOVERY MAX (16), the system reads into adjacent fields of the struct tcpm port, specifically the altmodes count or the altmode desc[] array containing partner-supplied SVDM Discovery Modes VDOs. A partner can exploit this by injecting a chosen SVID into altmode desc[0].vdo and manipulating svid index to 20, forcing paltmode->svid to load an arbitrary SVID, which is then registered via typec partner register altmode().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.