Unrated severityNVD Advisory· Published Jul 19, 2026· Updated Jul 30, 2026
CVE-2026-63961
CVE-2026-63961
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: altmodes/displayport: validate count before reading Status Update VDO
A broken/malicious device can send the incorrect count for a status update VDO, which will cause the kernel to read uninitialized stack data and send it off elsewhere.
Fix this up by correctly verifying the count for the update object.
Affected products
15- osv-coords14 versionspkg:linux/kernelpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
>= 4.19.0, < 5.10.259+ 13 more
- (no CPE)range: >= 4.19.0, < 5.10.259
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1.160000.2.19
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
- (no CPE)range: < 6.12.0-160000.37.1
Patches
Vulnerability mechanics
References
8- git.kernel.org/stable/c/64bd6ccc5799f8473d1f37d4d8f53093dfec5c02nvd
- git.kernel.org/stable/c/6ffdbcd7a02f3af8fff9b6519830369f574ed44cnvd
- git.kernel.org/stable/c/70e7045849e954e56dcbf441b6330e66bc996306nvd
- git.kernel.org/stable/c/74aabe9ea30fdfba924fce9594e6aa69a596a4bbnvd
- git.kernel.org/stable/c/77a759ec30bc5fb0dd9c867b711d0acfed6c7faanvd
- git.kernel.org/stable/c/8a18f896e667df491331371b55d4ad644dc51d60nvd
- git.kernel.org/stable/c/b10eff5abe6aa2a5af10ed17bddff76e3b6e6b9bnvd
- git.kernel.org/stable/c/dd7118c010f324497c275e8fd7a35c9baaa2a00fnvd
News mentions
0No linked articles in our index yet.