{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-63963", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.024Z", "datePublished": "2026-07-19T14:55:52.388Z", "dateUpdated": "2026-07-20T06:41:43.925Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T06:41:43.925Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers\n\nProperly validate the count passed from a device when calling\nsvdm_consume_identity() or svdm_consume_identity_sop_prime() as the\ndevice-controlled value could index off of the static arrays, which\ncould leak data."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/typec/tcpm/tcpm.c"], "versions": [{"version": "f0690a25a140b853b1842fa80faf828601bb47e8", "lessThan": "569f7971542eb10025d8a0989b83f28a29d8ba20", "status": "affected", "versionType": "git"}, {"version": "f0690a25a140b853b1842fa80faf828601bb47e8", "lessThan": "f9d787fbe83127105e42088cca40e5118db0d810", "status": "affected", "versionType": "git"}, {"version": "f0690a25a140b853b1842fa80faf828601bb47e8", "lessThan": "ed8649f3822e211d025bcab5158af6f8a38c8705", "status": "affected", "versionType": "git"}, {"version": "f0690a25a140b853b1842fa80faf828601bb47e8", "lessThan": "8fbc349e8383125dd2d8de1c1e926279d398ab17", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/usb/typec/tcpm/tcpm.c"], "versions": [{"version": "4.12", "status": "affected"}, {"version": "0", "lessThan": "4.12", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.93", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.35", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.12", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.12.93"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "6.18.35"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "7.0.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.12", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/569f7971542eb10025d8a0989b83f28a29d8ba20"}, {"url": "https://git.kernel.org/stable/c/f9d787fbe83127105e42088cca40e5118db0d810"}, {"url": "https://git.kernel.org/stable/c/ed8649f3822e211d025bcab5158af6f8a38c8705"}, {"url": "https://git.kernel.org/stable/c/8fbc349e8383125dd2d8de1c1e926279d398ab17"}], "title": "usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers", "id": "2502465", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502465"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-125", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nusb: typec: tcpm: validate VDO count in Discover Identity ACK handlers\nProperly validate the count passed from a device when calling\nsvdm_consume_identity() or svdm_consume_identity_sop_prime() as the\ndevice-controlled value could index off of the static arrays, which\ncould leak data.", "A flaw was found in the Linux kernel's USB Type-C subsystem. A malicious or malformed USB Type-C device could send an invalid Vendor Defined Object (VDO) count during the Discover Identity Acknowledgement (ACK) process. This improper validation could allow the device to read beyond the intended memory boundaries, potentially leading to information disclosure from the kernel."], "name": "CVE-2026-63963", "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-63963\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-63963\nhttps://lore.kernel.org/linux-cve-announce/2026071958-CVE-2026-63963-56d2@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f0690a25a140b853b1842fa80faf828601bb47e8,569f7971542eb10025d8a0989b83f28a29d8ba20)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f0690a25a140b853b1842fa80faf828601bb47e8,f9d787fbe83127105e42088cca40e5118db0d810)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f0690a25a140b853b1842fa80faf828601bb47e8,ed8649f3822e211d025bcab5158af6f8a38c8705)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f0690a25a140b853b1842fa80faf828601bb47e8,8fbc349e8383125dd2d8de1c1e926279d398ab17)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "4.12"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,4.12)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.93,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.35,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.12,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-07-21T15:45:08.342628+00:00", "updated": "2026-07-21T15:45:08.342689+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}