usb c security

CVE-2026-63963 is a newly published Linux kernel information-disclosure vulnerability in the USB Type-C Power Delivery stack, and it is a reminder that the devices connected to a modern USB-C port are not merely passive peripherals. The flaw affects the TCPM implementation used by Linux to...

CVE-2026-63961 is a newly published Linux kernel vulnerability that turns an apparently narrow USB Type-C DisplayPort Alt Mode parsing mistake into a meaningful kernel information-disclosure concern. The flaw, resolved upstream and already propagated into multiple stable kernel series, allows a...

CVE-2026-63964 is a narrowly scoped but technically important Linux kernel flaw in the Cypress CCGx USB Type-C controller driver: a malformed firmware file that contains no colon-delimited record header can push the kernel into an invalid memory-access path during a controller firmware update...

CVE-2026-63958 is a newly cataloged Linux kernel vulnerability in the USB Type-C Connector System Software Interface, or UCSI, code that deserves attention well beyond the usual Linux security mailing lists: a malformed connector-change notification from firmware or a USB-C controller can cause...

CVE-2026-63962 is a newly published Linux kernel security fix that turns an easily overlooked USB Type-C protocol parsing mistake into a potentially meaningful memory-corruption issue. The vulnerability sits in the Type-C Port Manager subsystem, where a connected USB-C partner can advertise...

CVE-2026-63959 is a newly published Linux kernel vulnerability that turns an apparently narrow USB Type-C protocol parsing flaw into a reminder that modern ports are no longer simple peripheral connectors. The issue, disclosed on July 19, 2026 and updated in the National Vulnerability Database...