CVE-2026-63959
mediumIn the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven data objects but whose body carries fewer than that. Check for this, and rightfully reject the message, instead of reading from uninitialized stack memory.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-07-19 16:17
Modified: 2026-10-30 14:35
NVD status: Analyzed
Last synced 3 days ago
Verified against the source API 2026-10-30 14:40 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥5.10 <6.1.191, ≥6.6 <6.6.143, ≥6.7 <6.12.93, ≥6.13 <6.18.35, ≥6.19 <7.0.12, 7.1
Weakness classification (CWE)
NVD-CWE-noinfo
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/0af00f1459f5dd757f0d392f8caa38039561ac62
Patch / mitigation: https://git.kernel.org/stable/c/8a8cd4790b08c9f79ea2250b3bd933fd79f67e56
Patch / mitigation: https://git.kernel.org/stable/c/9b496e3371c04f0a03b7faa5d2442536d00e3998
Patch / mitigation: https://git.kernel.org/stable/c/aa2f716327be1818e1cb156da8a2844804aaec2f
Patch / mitigation: https://git.kernel.org/stable/c/c4ab8e2d4432abb646c5c0687f8dab173da901f9
Patch / mitigation: https://git.kernel.org/stable/c/dc17721d42e6d89f63572e63add8306a0e15eb3c
References
- https://git.kernel.org/stable/c/0af00f1459f5dd757f0d392f8caa38039561ac62 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/8a8cd4790b08c9f79ea2250b3bd933fd79f67e56 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/9b496e3371c04f0a03b7faa5d2442536d00e3998 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/aa2f716327be1818e1cb156da8a2844804aaec2f 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/c4ab8e2d4432abb646c5c0687f8dab173da901f9 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/dc17721d42e6d89f63572e63add8306a0e15eb3c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-10-30 14:40 UTC · record ↗