Към съдържанието
Търсене

CVE-2026-98760: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() tps6598x_connect() passes a stack-allocated typec_partner_desc to typec_register_partner() after initializing only usb_pd, accessory and identity. typec_register_partner() copies attach and deattach from the descriptor into the partner. With those fields left unset, garbage function pointers may be stored and later invoked from typec_partner_link_device() when a USB device is linked to the port. Uninitialized pd_revision and usb_capability similarly leak stack data through partner sysfs. Zero-initialize the descriptor so optional callbacks remain NULL and the remaining fields are zero.

    Засегнати продукти

    • Linux Linux: 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди bab4210634be8e6d4181155d1b99106ad24cea70; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди 72582e9bb721cd766ae333af8ebf90061dfefeaf; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди a39d53f70e637ff3970046c32106a0e64fca62cd; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди 4b6823ce0e548491cb9663303cba28e18d351096; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди 282be6ae8be791762740107c79cecf5121f66063; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14; 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 преди c4b27b3605788bbf9e4251f3cd4ab94645ab036f
    • Linux Linux: 4.15; преди 4.15; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.56 до 6.18.*; 7.2.10 до 7.2.*; от 7.3 нататък

    История

    • 18 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98760: Linux | freedomonline.bg