CVE-2026-98760

usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 30, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

tps6598x_connect() passes a stack-allocated typec_partner_desc to typec_register_partner() after initializing only usb_pd, accessory and identity.

typec_register_partner() copies attach and deattach from the descriptor into the partner. With those fields left unset, garbage function pointers may be stored and later invoked from typec_partner_link_device() when a USB device is linked to the port. Uninitialized pd_revision and usb_capability similarly leak stack data through partner sysfs.

Zero-initialize the descriptor so optional callbacks remain NULL and the remaining fields are zero.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before bab4210634be8e6d4181155d1b99106ad24cea70Affected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 72582e9bb721cd766ae333af8ebf90061dfefeafAffected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before a39d53f70e637ff3970046c32106a0e64fca62cdAffected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 4b6823ce0e548491cb9663303cba28e18d351096Affected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 282be6ae8be791762740107c79cecf5121f66063Affected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14Affected 0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before c4b27b3605788bbf9e4251f3cd4ab94645ab036fAffected
LinuxLinux	4.15Affected before 4.15Not affected 5.15.224 through 5.15.Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.113 through 6.12.Not affected 6.18.56 through 6.18.Not affected 7.2.10 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before bab4210634be8e6d4181155d1b99106ad24cea70Affected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 72582e9bb721cd766ae333af8ebf90061dfefeafAffected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before a39d53f70e637ff3970046c32106a0e64fca62cdAffected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 4b6823ce0e548491cb9663303cba28e18d351096Affected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before 282be6ae8be791762740107c79cecf5121f66063Affected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14Affected
0a4c005bd1715d8b32a368ed5516a6ee7e603d18 to before c4b27b3605788bbf9e4251f3cd4ab94645ab036fAffected

LinuxLinux

4.15Affected
before 4.15Not affected
5.15.224 through 5.15.*Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.113 through 6.12.*Not affected
6.18.56 through 6.18.*Not affected
7.2.10 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.