{"id":"CVE-2026-98760","summary":"usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()\n\ntps6598x_connect() passes a stack-allocated typec_partner_desc to\ntypec_register_partner() after initializing only usb_pd, accessory and\nidentity.\n\ntypec_register_partner() copies attach and deattach from the descriptor\ninto the partner. With those fields left unset, garbage function pointers\nmay be stored and later invoked from typec_partner_link_device() when a USB\ndevice is linked to the port. Uninitialized pd_revision and usb_capability\nsimilarly leak stack data through partner sysfs.\n\nZero-initialize the descriptor so optional callbacks remain NULL and the\nremaining fields are zero.","modified":"2026-10-19T02:47:17.732018295Z","published":"2026-10-18T15:47:50.759Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98760.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/282be6ae8be791762740107c79cecf5121f66063"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4b6823ce0e548491cb9663303cba28e18d351096"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c4b27b3605788bbf9e4251f3cd4ab94645ab036f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98760.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98760"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0a4c005bd1715d8b32a368ed5516a6ee7e603d18"},{"fixed":"4b6823ce0e548491cb9663303cba28e18d351096"},{"fixed":"282be6ae8be791762740107c79cecf5121f66063"},{"fixed":"dac0c073c6ad5f1bbb5e9fea9023fc1b4dab5e14"},{"fixed":"c4b27b3605788bbf9e4251f3cd4ab94645ab036f"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98760.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"6.12.113"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.56"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98760.json"}}],"schema_version":"1.9.0"}