VYPR

cros_usbpd-charger

by Linux

CVEs (2)

  • CVE-2026-89471Sep 11, 2026
    risk 0.00cvss epss

    In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd-charger: bound the EC-reported port count cros_usbpd_charger_probe() reads two port counts from the EC and uses one of them, num_charger_ports, as the loop bound when populating a…

  • CVE-2026-89470Sep 11, 2026
    risk 0.00cvss epss

    In the Linux kernel, the following vulnerability has been resolved: power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS Currently the cros_usbpd-charger driver probe iterates based on raw charger port count returned by the embedded controller. The only check is…