Vulnerability in Linux

CVE-2026-63964

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header do_flash() locates the first .cyacd record with p = strnchr(fw->data, fw->size, ':'); while…

EPSS: 0.002 (11.4th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 0, 5.2, 6.6.143

References