7.7

CVE-2026-90025

usb: typec: ucsi: displayport: Fix OOB altmode array index

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: displayport: Fix OOB altmode array index

The UCSI displayport driver indexes the connector's port altmode array
with the GET_CURRENT_CAM response after checking it is not 0xff. The
port altmode array is UCSI_MAX_ALTMODES elements long. If the PPM
returns an invalid GET_CURRENT_CAM response above UCSI_MAX_ALTMODES and
not equal to 0xff, the kernel may crash with an array index OOB error.

Update the UCSI displayport driver to verify the current cam is less
than UCSI_MAX_ALTMODES before accessing the port altmode array.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 8fde7e4a366184e9a6aa95541e52933a73c00a74
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 83f1abd62cc134700ba92e1e2dc650a49a185497
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 1ffed96ef986e2cdf986aa4a4506a5e6dcdf4456
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 58e0ee293ec5e06cacbe3953ad44042f1473dae9
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < ac9f878c468052af6571e8639ab1c3ae040b908f
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 33a81acd2d1d0667d4eff93cb90339fa53e617e8
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < bdaaf3074aedce8f1b173cc363d61cff5f6a585f
Status affected
Version af8622f6a585d8d82b11cd7987e082861fd0edd3
Version < 04cec690b1fd9d1c4c314b91a10d8c68a3acfe18
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.2
Status affected
Version 0
Version < 5.2
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.067
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.7 2.5 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/8fde7e4a366184e9a6aa95541e52933a73c00a74
https://git.kernel.org/stable/c/83f1abd62cc134700ba92e1e2dc650a49a185497
https://git.kernel.org/stable/c/1ffed96ef986e2cdf986aa4a4506a5e6dcdf4456
https://git.kernel.org/stable/c/58e0ee293ec5e06cacbe3953ad44042f1473dae9
https://git.kernel.org/stable/c/ac9f878c468052af6571e8639ab1c3ae040b908f
https://git.kernel.org/stable/c/33a81acd2d1d0667d4eff93cb90339fa53e617e8
https://git.kernel.org/stable/c/bdaaf3074aedce8f1b173cc363d61cff5f6a585f
https://git.kernel.org/stable/c/04cec690b1fd9d1c4c314b91a10d8c68a3acfe18