Riskcovery

CVE-2026-64209

phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

State
Published
Severity
Not scored
Published
Jul 24, 2026
Updated
Jul 24, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

swing_tbl and pre_emphasis_tbl are 4x4 arrays (valid indices 0-3), but the boundary check uses "> 4" instead of ">= 4", allowing index 4 to cause an out-of-bounds access.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 81791c45c8e0eaeba9a40927eecd082a8500f709 to before cb35af6e7f3d5628178b58c631e305b1def8edf7Affected
  • 81791c45c8e0eaeba9a40927eecd082a8500f709 to before ea17fc4d7dc2ba6459b1a318962960520201baf1Affected
LinuxLinux
  • 7.0Affected
  • before 7.0Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.