{"id":"CVE-2026-98759","summary":"usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()\n\ncd321x_update_work() passes a stack-allocated typec_partner_desc to\ntypec_register_partner() after initializing only usb_pd, accessory and\nidentity.\n\ntypec_register_partner() copies attach and deattach from the descriptor\ninto the partner. With those fields left unset, garbage function pointers\nmay be stored and later invoked from typec_partner_link_device() when a USB\ndevice is linked to the port. Uninitialized pd_revision and usb_capability\nsimilarly leak stack data through partner sysfs.\n\nZero-initialize the descriptor so optional callbacks remain NULL and the\nremaining fields are zero.","modified":"2026-10-20T02:30:50.906364175Z","published":"2026-10-18T15:47:47.988Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98759.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5414144e202a32437e3eb436cd3f5f00d79ad86e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/75dc6cb377efd2f4428b7f76d3a590a0bbc10399"},{"type":"WEB","url":"https://git.kernel.org/stable/c/88c7e458af53ff781a3f1051708395892b325576"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98759.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98759"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"82432bbfb9e83b7e81d04660fe129b99a29b2ac2"},{"fixed":"75dc6cb377efd2f4428b7f76d3a590a0bbc10399"},{"fixed":"5414144e202a32437e3eb436cd3f5f00d79ad86e"},{"fixed":"88c7e458af53ff781a3f1051708395892b325576"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98759.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.56"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98759.json"}}],"schema_version":"1.9.0"}