CVE-2026-63964 usb: typec: ucsi: ccg: reject firmware images without a ':' record header

🗓️ 19 Jul 2026 14:55:53Reported by LinuxType

Linux kernel usb typec ucsi ccg crash on firmware without colon header; fixed by returning invalid argument.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-63964	19 Jul 202614:55	–	attackerkb
CVE	CVE-2026-63964	19 Jul 202614:55	–	cve
EUVD	EUVD-2026-45737	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63964	19 Jul 202616:17	–	nvd
OSV	CVE-2026-63964 usb: typec: ucsi: ccg: reject firmware images without a ':' record header	19 Jul 202614:55	–	osv
OSV	DEBIAN-CVE-2026-63964	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63964	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61281	19 Jul 202600:00	–	ptsecurity
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63964	20 Jul 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/typec/ucsi/ucsi_ccg.c"
    ],
    "versions": [
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "b41dfc033fe594e152648050e95b9489cd53e9e3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "2f395ca1263bd181995eb829f5943a83a20db213",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "6526f8684f72391138353642af908803ba70795e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "3f432b8203066c26770fe6ea591361f10021dd6b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "c4ee519b06389e59ba2d6aa722fcc4a02a8bbcbb",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "a38ed87818b2419090fb1a6338ddce6842b65dfa",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "c8460de584fe5415d212cfdd127d4db90835a450",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "5c9ae5a87573d38cfc4c740aafda2fa6ce06e401",
        "lessThan": "d7486952bf74e546ee3748fb14b2d07881fa6273",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/usb/typec/ucsi/ucsi_ccg.c"
    ],
    "versions": [
      {
        "version": "5.2",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.2",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.259",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.210",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.176",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.143",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.93",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.35",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.12",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/a38ed87818b2419090fb1a6338ddce6842b65dfa
git	www.git.kernel.org/stable/c/d7486952bf74e546ee3748fb14b2d07881fa6273
git	www.git.kernel.org/stable/c/6526f8684f72391138353642af908803ba70795e
git	www.git.kernel.org/stable/c/3f432b8203066c26770fe6ea591361f10021dd6b
git	www.git.kernel.org/stable/c/b41dfc033fe594e152648050e95b9489cd53e9e3
git	www.git.kernel.org/stable/c/2f395ca1263bd181995eb829f5943a83a20db213
git	www.git.kernel.org/stable/c/c4ee519b06389e59ba2d6aa722fcc4a02a8bbcbb
git	www.git.kernel.org/stable/c/c8460de584fe5415d212cfdd127d4db90835a450

20 Jul 2026 06:41Current

EPSS0.0021