> CVE-2026-63963

« BACK_TO_HOME
PUBLISHED
2026-07-19 16:17
MODIFIED
2026-07-19 16:17
EPSS (Prob. Exploit)
0.21%
Top 90.0%
DATA SOURCES:
NVD 🔗 2026-07-19 RED HAT 🔗 2026-07-26 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-26 MSRC 🔗 2026-11-02

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Properly validate the count passed from a device when calling svdm_consume_identity() or svdm_consume_identity_sop_prime() as the device-controlled value could index off of the static arrays, which could leak data.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
19/07/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 26/07/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 26/07/2026 05:02
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 3 months ago

> REFERENCES

https://git.kernel.org/stable/c/569f7971542eb10025d8a0989b83f28a29d8ba20
https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17
https://git.kernel.org/stable/c/ed8649f3822e211d025bcab5158af6f8a38c8705
https://git.kernel.org/stable/c/f9d787fbe83127105e42088cca40e5118db0d810
« BACK_TO_HOME