Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31729

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in ucsi_notify_common() The connector number extracted from CCI via UCSI_CCI_CONNECTOR() is a 7-bit field (0-127) that is used to index into the connector array in ucsi_connector_change(). However, the array is only allocated for the number of connectors reported by the device (typically 2-4 entries). A malicious or malfunctioning device could report an out-of-range connector number
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4b43e929e85594cb299762a0e442333d16bd1bfc76e239c6e7898530a1c0a4b7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/typec/ucsi/ucsi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.22","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.12","versionType":"semver"},{"le…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/typec/ucsi/ucsi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f6dcbf2b024d55549959402f1db6c614e51d52cb","status":"affected","version":"bdc62f2bae8fb0e8e99574de5232f0a3c54a27df","versionType":"git"},{"lessThan":"f4e608fe12b7ac6a4a57176ab0296bb5a110a078","status":"affected","version":"bdc62f2bae8fb0e8e99574de5232f0a3c54a27df","versionType":"git"},{"lessThan":"98429e9ec89a5e3a204112dfaa2dbe6ca28493a0","status":"affected","version":"bdc62f2bae8fb0e8…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/typec/ucsi/ucsi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.22","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.12","versionType":"semver"},{"le…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/typec/ucsi/ucsi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f6dcbf2b024d55549959402f1db6c614e51d52cb","status":"affected","version":"bdc62f2bae8fb0e8e99574de5232f0a3c54a27df","versionType":"git"},{"lessThan":"f4e608fe12b7ac6a4a57176ab0296bb5a110a078","status":"affected","version":"bdc62f2bae8fb0e8e99574de5232f0a3c54a27df","versionType":"git"},{"lessThan":"98429e9ec89a5e3a204112dfaa2dbe6ca28493a0","status":"affected","version":"bdc62f2bae8fb0e8…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/98429e9ec89a5e3a204112dfaa2dbe6ca28493a0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d2d8c17ac01a1b1f638ea5d340a884ccc5015186"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f4e608fe12b7ac6a4a57176ab0296bb5a110a078"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/f6dcbf2b024d55549959402f1db6c614e51d52cb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:565eaa364ea8701c29c0c7d41ef501350c7fd88bb45387d36efce805e37a7769 · sha256:6ca9f927300d4d4b… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer