CVE Explorer

CVE-2026-64330

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_consume_modes() In svdm_consume_modes(), the SVID value is read from pmdata->svids using pmdata->svid_index as an array index without bounds validation: paltmode->svid = pmdata->svids[pmdata->svid_index]; If pmdata->svid_index is driven beyond SVID_DISCOVERY_MAX (16), it results in an out-of-bounds read of the pmdata->svids array. Because pd_mode_data is embedded inside struc

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9b5ce875975091b372c6c1f62a391442d480234dd949a3ff27605df802ece9c9

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/typec/tcpm/tcpm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.19"},{"lessThan":"4.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/typec/tcpm/tcpm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"89ff289cbf5d3b659a2babc5ccaae4eaf7e7cf53","status":"affected","version":"4ab8c18d4d67321cc7b660559de17511d4fc0237","versionType":"git"},{"lessThan":"d638ec188e95fe60f4b01106ffd41958f8fb3c2c","status":"affected","version":"4ab8c18d4d67321cc7b660559de17511d4fc0237","versionType":"git"},{"lessThan":"f8163c414de8640f2ca82ce4dc93409d4cdc2fad","status":"affected","version":"4ab8c18d4d67321c…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/012406f89abc52d1d5f07aa5653b519ebf6d2407"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/313ca06e7e224ca1dfadd5722fe71fb8bc276b8b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/3e1b1ac47e8163627f159f30d80d51b914620dd4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/7b681dd5fbf60b24a13c14661e5b7735759fb491"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/89ff289cbf5d3b659a2babc5ccaae4eaf7e7cf53"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/c6d2af3b217a525741c472f0ab45d7d274b8468f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/d638ec188e95fe60f4b01106ffd41958f8fb3c2c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/f8163c414de8640f2ca82ce4dc93409d4cdc2fad"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0294a81a5bcff66610ab2bec2e8cd31f139018f4dabd8b176f731cab7a7ae167 · sha256:bd3e384b7610f89e… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer